Feds Confirm Remote Killing of Volt Typhoon's SOHO Botnet

US authorities executed a court-authorized operation to disrupt Volt Typhoon (aka Bronze Silhouette / Vanguard Panda) by mimicking the group's C2 to remove KV Botnet malware from vulnerable Cisco and Netgear SOHO routers. The takedown temporarily severed the botnet and blocked C2 communications, but officials and analysts warn the state-sponsored APT—which targets utilities, energy, telecoms and industrial sites to establish footholds for future disruptive operations—remains at large and likely to rebuild or use alternate methods.