Read on Twitter
This is interesting: FBI sought and obtained a warrant to access compromised Exchange servers in the US for the narrow purpose of causing the malware to uninstall https://www.justice.gov/opa/pr/justice-department-announces-court-authorized-effort-disrupt-exploitation-microsoft-exchange
This is specifically related to the Hafnium mass-exploitation of an Exchange 0day earlier in the year, attributed by Microsoft to a state sponsored group operating out of China.
Also good example of the Federal Rule of Criminal Procedure 41(b)(6)(B) change solving the jurisdictional spaghetti minefield that this would otherwise have entailed
A: so um, what jurisdiction is this malware in
B: yes
B: yes
A: no I mean where is the victim based, like, is this in Florida or Texas, like, which zipcodes
B: yes, all of the zipcodes.
B: yes, all of the zipcodes.
