‘We’re defending our homeland’: FBI remotely scrubs Russian malware from thousands of compromised devices – series of FBI engineered commands sent to compromised home and small office routers disrupted GRU botnet targeting military, government, and critical infrastructure
www.techradar.com
The FBI used court-authorization to remotely reset thousands of compromised home and small office routers, kicking the GRU out of sensitive networks.
    • x00z@lemmy.worldEnglish
      4·
      10 days ago

      This and taking control of botnet control panels are the most common methods.

      Something that also often happens is that your home connection has been used in some sort of attack or your IP is found in some other logs and your ISP gets contacted, often even automatically. I had a compromised device on my network once and my ISP kept calling me to fix it. I’m sure if it was router malware some ISPs might use their CWMP or SNMP access to clear it.