News for hackers. Stuff that matters.

A comment on How the FBI took down the Qakbot botnet. Parent comment

Re:How the FBI took down the Qakbot botnet by munchler on Friday September 01, 2023 @12:23PM (#37352860)
This is a poor analogy. Most of the infected computers that the FBI accessed aren’t even located in the US. The FBI has no jurisdiction in those countries.
[ Parent | on HN ]
Re:How the FBI took down the Qakbot botnet by Rewrap3643 on Friday September 01, 2023 @12:32PM (#37352987)
Correct, which is why the warrant was limited to computers in the United States (I don't know how they went about this in practice).

https://www.justice.gov/d9/2023-08/23mj4244_warrant_redacted...

[ Parent | on HN ]
Re:How the FBI took down the Qakbot botnet by mulmen on Friday September 01, 2023 @01:00PM (#37353391)
To go back to the car analogy this is like the police getting approval to shoot the tires and then closing their eyes when they pull the trigger.
[ Parent | on HN ]
Re:How the FBI took down the Qakbot botnet by parl_match on Friday September 01, 2023 @04:45PM (#37355989)
They said they retrieved IP addresses and "routing information", doing fine grained geo ip lookups is impossible, but the accuracy of country of origin is very high, especially in the US
[ Parent | on HN ]
Re:How the FBI took down the Qakbot botnet by throwitaway156 on Friday September 01, 2023 @07:31PM (#37357247)
> geo ip lookups is impossible

impossible is the wrong word here, its just unnecessary. The Feds can (and do) definitely contact domestic & international ISPs to perform near 100% accurate lookups.

[ Parent | on HN ]