All news with #volt typhoon tag

🛡️ The U.S. Department of Justice disrupted the Famous Chollima (WageMole) network by charging 14 individuals, arresting two U.S. nationals, and seizing about 187 laptops linked to North Korean remote IT worker schemes. Operation "Lonestar Roundup" involved searches of 40 residences in Texas where facilitators hosted employer-issued devices used to mask DPRK operatives. CrowdStrike has tracked these schemes since April 2025, noting methods like fake theft reports and address rotation to divert shipments. An Ohio indictment describes a scheme from 2019–July 2025 that impacted 70 companies and generated roughly $3 million for the threat actors.

🔍 Lumen’s Black Lotus Labs reports a China-linked botnet called JDY has grown to over 1,500 compromised SOHO and IoT devices used to rapidly discover and fingerprint internet-facing systems after public vulnerability disclosures. The activity, tied to nation-state actors including Volt Typhoon, enables persistent, distributed reconnaissance that can evade geofencing and IP-reputation controls. Researchers warn this marks a shift toward industrialized pre-exploitation scanning and undermines traditional perimeter patch and monitoring assumptions.

🔒 The FCC has banned the import and sale of all consumer-grade internet routers manufactured in foreign countries, saying they pose an 'unacceptable risk' to US national security. The rule, announced on 23 March, allows only devices with conditional DoD or DHS approval, effectively blocking most future consumer models because many are made abroad. The agency cited incidents such as the Volt, Flax and Salt Typhoon attacks, while industry experts caution that governance, patching and lifecycle management — not just country of origin — drive much of the risk.