Government release

# Justice Department Announces Court-Authorized Disruption of Botnet Controlled by the Russian Federation’s Main Intelligence Directorate (GRU)

US DOJ, April 6, 2022. Establishes the court-authorized removal of GRU-linked malware from compromised C2 devices..

**Source type:** Government release

**Published:** April 6, 2022

**Research grade:** P1

**Used in entries:** 5

## Bibliographic record

**Publisher:** US DOJ

**Published:** April 6, 2022

**Source type:** Government release

**Research grade:** Source grade P1

**Language:** English

**Official record:** Official publication

**Address:** [https://www.justice.gov/archives/opa/pr/justice-department-announces-court-authorized-disruption-botnet-controlled-russian-federation](https://www.justice.gov/archives/opa/pr/justice-department-announces-court-authorized-disruption-botnet-controlled-russian-federation)

**What it supports:** Establishes the court-authorized removal of GRU-linked malware from compromised C2 devices.

**Dataset id:** src\_doj\_cyclops\_blink\_2022

How this source is used

Cited 5 times across 3 record types.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Takedown records

1 citation

Cited on the takedown record itself.

-
[Cyclops Blink disruption](https://takedownindex.org/takedowns/cyclops-blink-disruption)

State sponsored, March 2022

Primary source

### Organization roles

3 citations

Cited for an organization's recorded role in a takedown.

-
[Federal Bureau of Investigation](https://takedownindex.org/takedowns/cyclops-blink-disruption)

Operational lead, Cyclops Blink disruption

Primary source
-
[United States Department of Justice](https://takedownindex.org/takedowns/cyclops-blink-disruption)

Prosecuting, Cyclops Blink disruption

Primary source
-
[WatchGuard Technologies](https://takedownindex.org/takedowns/cyclops-blink-disruption)

Technical partner, Cyclops Blink disruption

Primary source

### Infrastructure

1 citation

Cited for infrastructure recorded as acted on.

-
[Command and control server](https://takedownindex.org/takedowns/cyclops-blink-disruption)

Command and control server remediated, Cyclops Blink disruption

Primary source

[All sources](https://takedownindex.org/sources)