Flax Typhoon
Coverage of Flax Typhoon in the Nexus archive.
- A dozen allied agencies say China is building covert hacker networks out of everyday routers
A dozen allied agencies warn that China-nexus cyber actors are using large-scale covert networks composed of compromised SOHO routers and IoT devices to conduct cyberattacks. These networks enable low-risk, deniable operations for reconnaissance, malware delivery, and espionage, with examples like the Raptor Train botnet. The advisory highlights a strategic shift in tactics and urges organizations to adopt defensive measures.
- FBI Director Announces Chinese Botnet Disruption, Exposes Flax Typhoon Hacker Group’s True Identity at Aspen Cyber Summit
FBI Director Christopher Wray announced the successful disruption of a Chinese botnet and the exposure of the Flax Typhoon hacker group's true identity at the Aspen Cyber Summit on September 18. The operation freed thousands of impacted devices from the botnet's control through coordination with international partners.