Targeting of home internet routers to add to a botnet
Date of report
  • December 2023
Volt Typhoon targeted unsupported or unpatched home and small office internet routers. Once the routers were compromised, they were used to obfuscate Volt Typhoon’s operations. The network also contained routers from a U.S. judicial organization and a satellite management firm, although it was unclear if these organizations were targeted beyond adding the routers to the botnet.
Suspected victims
  • Home and small office routers
Suspected state sponsor
  • China
Type of incident
  • Espionage
Target category
  • Civil society
Victim government reaction
  • Unknown
Policy response
Suspected state sponsor response