FBI Scrubbed 19,000 PCs Snared By Coreflood Botnet
Summary: The FBI told a federal court it had issued roughly 19,000 uninstall commands to Coreflood-infected PCs belonging to two dozen identifiable victims in the United States, after being granted authority in April 2011 to seize 29 control domains and redirect their traffic to a substitute FBI server. Agent Kenneth Keller said the bureau obtained written consent from all 24 victims, none reported adverse consequences, and the decline in the botnet's size was likely due in large part to victim notification efforts.
Why it matters: The FBI is winding down its substitute server because monitoring it consumes considerable law enforcement resources, and it notes Coreflood software will begin running again on still-infected machines once that server goes offline - leaving those machines dependent on the domain seizures alone to keep the defendants out.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026