• zingo
    link
    fedilink
    English
    arrow-up
    10
    ·
    23 hours ago

    How did the FBI have access to the computers to delete the malware in the first place?

    • Rentlar@lemmy.ca
      link
      fedilink
      English
      arrow-up
      17
      ·
      edit-2
      22 hours ago

      In the article it reads that the FBI had taken over the server which the PlugX malware connects to. They had the server issue the command to machines that respond to PlugX remote requests, to have PlugX delete its own registry keys and generated files, then create a temporary script to uninstall PlugX and clean remaining traces, and finally run that script which deletes itself at the end.

      • Scubus
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        2
        ·
        13 hours ago

        So the fbi installed their own trojan on thousands of American computers, got it.

        • kylian0087@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          1
          ·
          edit-2
          5 hours ago

          No send a signal to already infected devices with the control server of the bad actors them self.

  • badbytes@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    ·
    22 hours ago

    The FBI sending signals to manipulate users sysyems, is technically hacking. White hat possibly, but still hacking.

    • ghen
      link
      fedilink
      English
      arrow-up
      3
      ·
      21 hours ago

      It’s not hacking if they legally own plugx and the end users have given permission to plugx