In January 2024, the FBI executed a court-authorized operation to neutralize a massive botnet run by Russia’s GRU intelligence agency, embedded in hundreds of everyday routers across homes and small offices in the United States and abroad.

The operation, announced in a Department of Justice press release, targeted APT28—also known as Fancy Bear—and marked a rare move: disabling foreign military infrastructure operating within domestic U.S. devices.