DOJ, FBI disrupt Russian intelligence botnet

U.S. authorities (FBI and DOJ) executed a court-authorized operation to disrupt a Mirai-based Moobot botnet operated by Russian GRU Unit 26165 (APT28) that had compromised hundreds of Ubiquiti EdgeOS routers using default administrative passwords; the action removed malicious files, adjusted firewall rules to block remote management, and briefly collected routing metadata, though routers can be reinfected if factory resets retain default credentials.