Government release

# PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure

Cybersecurity and Infrastructure Security Agency, February 7, 2024. Threat context for the KV Botnet disruption.

**Source type:** Government release

**Published:** February 7, 2024

**Research grade:** P1

**Used in entries:** 2

## Bibliographic record

**Publisher:** Cybersecurity and Infrastructure Security Agency

**Published:** February 7, 2024

**Source type:** Government release

**Research grade:** Source grade P1

**Language:** English

**Official record:** Official publication

**Address:** [https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-038a](https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-038a)

**What it supports:** Threat context for the KV Botnet disruption

**Dataset id:** src\_cisa\_volt\_typhoon\_2024

How this source is used

Cited 2 times across 2 record types.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Takedown records

1 citation

Cited on the takedown record itself.

-
[KV Botnet disruption](https://takedownindex.org/takedowns/kv-botnet-disruption)

State sponsored, Date not established

Supporting source

### Organization roles

1 citation

Cited for an organization's recorded role in a takedown.

-
[Cybersecurity and Infrastructure Security Agency](https://takedownindex.org/takedowns/kv-botnet-disruption)

Supporting, KV Botnet disruption

Supporting source

[All sources](https://takedownindex.org/sources)