Reports from cybersecurity agencies or official government statements.

Five Eyes Reveal Raptor Train Botnet Compromising 260,000 IoT Devices Worldwide

Sep 18, 2024, 08:00 PM

A joint advisory issued by the U.S., UK, and their Five Eyes allies has revealed that a China-linked botnet has compromised over 260,000 Internet of Things (IoT) devices worldwide. The botnet, named 'Raptor Train,' has infected devices such as SOHO routers and IP cameras, posing significant cybersecurity risks. The advisory highlights that the botnet is linked to state-sponsored actors from the People's Republic of China (PRC) and is being used for malicious cyber activities. The National Security Agency (NSA), FBI, CNMF, and other cybersecurity agencies have recommended mitigations, including patching and updating IoT devices and replacing end-of-life equipment, to combat the threat. The U.S. has claimed to have neutralized a cyber-attack network affecting 200,000 devices, attributing the operation to hackers backed by the Chinese government. The UK’s Foreign, Commonwealth & Development Office (FCDO) has expressed support for the U.S. in exposing this malicious activity. The advisory also names Integrity Technology Group as a key player in the botnet operation.