The JDY botnet, a malware network previously associated with Chinese threat actors like Volt Typhoon, has significantly expanded its targeting scope and reconnaissance efforts.

The JDY botnet, a malware network previously associated with Chinese threat actors like Volt Typhoon, has significantly expanded its targeting scope and reconnaissance efforts.

JDY grew from 650 to 1,500+ devices after KV-botnet's takedown, enabling rapid reconnaissance and vulnerability targeting.

The JDY botnet, linked to China's Volt Typhoon, has doubled in size and now scans for newly disclosed vulnerabilities within hours. Most nodes are in the US.