Canada’s Spy Service Won Permission to Hack Two State-Linked Botnets — Assessed to Likely Include China — Hiding Inside Canadian Homes

For the first time, a Federal Court judge has authorized Canada’s intelligence service to hack into privately owned routers, servers and household internet devices across the country and disarm the malicious software that conscripts them into foreign botnets — virtual armies implanted by hostile states to act as trojan horses, attacking critical Canadian infrastructure from within Canadian homes — a power the court itself acknowledged would otherwise be a crime.

A newly released Federal Court ruling reveals the first warrant of its kind ever granted to Canadian Security Intelligence Service — authority to neutralize two state-run botnets pre-positioned against critical infrastructure, in what The Bureau assesses is Canada’s leg of a broader Five Eyes campaign that, across 2024, disrupted both Chinese and Russian intrusions.

The authority is disclosed in newly released reasons from Madam Justice Kane, who granted the warrant on May 1, 2024, and renewed it that August. Her reasons, dated February 2026, were made public only this week — more than two years after the warrant was first granted — after government lawyers applied significant redactions that stripped out the identities of the two foreign adversaries, along with other material they deemed national security secrets. That choice may itself invite scrutiny: the United States has openly attributed closely similar intrusions — and, in The Bureau’s assessment, likely part of the very same campaign — to Chinese state hackers, including the group known as Volt Typhoon.

The Federal Court announced the decision Monday as the first judicial authorization permitting CSIS to use threat reduction measures to protect critical infrastructure from foreign adversaries.

The ruling names no adversary. But its technical fingerprint, and its timing, place it squarely within an allied campaign that the United States made public through 2024 — a link the court itself invited, noting that the CSIS affiant pointed to a U.S. press release on disrupting cyber threats and to other Five Eyes governments being more open botnet takedowns.

The U.S. intelligence community calls the People’s Republic the “most active and persistent cyber threat” to American institutions, and the Office of the National Cyber Director has warned that Beijing seeks to “hold at risk U.S. and allied critical infrastructure.”

Congressional researchers track three publicly disclosed Chinese state- groups under the “Typhoon” label Microsoft assigns to Beijing’s hackers: Volt Typhoon, which pre-positions inside American energy, water, communications and transportation systems to prepare for disruption rather than espionage; Flax Typhoon, tied to Chinese contractors and built on a botnet of more than 260,000 internet-connected devices that U.S. authorities disrupted in September 2024; and Salt Typhoon, linked to the 2024 compromise of American telecommunications carriers.

It is the first two — Volt and Flax — that most closely fit the Canadian warrant. Volt Typhoon’s botnet was built largely on “end of life” Cisco and NetGear routers no longer receiving security patches — the very class of vulnerable hardware the Canadian court singled out — and served to pre-position against critical infrastructure, mirroring the ruling’s account of hijacked devices used as covert doorways into energy and government systems.

Flax Typhoon’s botnet of internet-connected cameras and appliances, in turn, mirrors the court’s emphasis on compromised household devices. Together the two would explain the reference to two foreign adversaries as two distinct Chinese operations. But the phrase can also be read as two different states. Within weeks of each other in early 2024, the FBI disrupted both Volt Typhoon’s router botnet and a separate network of routers that Russia’s military intelligence, the GRU, had turned into a global espionage platform — leaving a Chinese-and-Russian pairing equally consistent with the timing. The Bureau cannot resolve which from the redacted reasons.

What is on the record is that Canada is no bystander: the Communications Security Establishment’s cyber centre co-signed the Five Eyes advisories that named Volt Typhoon as a Chinese state- actor pre-positioning for disruption in the event of a crisis.

It is the first application of its kind since Parliament created the threat reduction power in the 2017 national security overhaul. CSIS sought what the court called the Cyber Threat Reduction Measures Warrant because the steps required to dismantle the networks — altering, degrading and destroying data on infected machines — would, absent a judge’s order, amount to offences under the Criminal Code’s computer-mischief provisions.

According to the ruling, the threat came from two botnets controlled by two foreign adversaries. A botnet is a network of compromised devices — in this case Canada-based servers, small office and office routers, and Internet of Things hardware, the everyday objects the court listed as doorbell cameras, security cameras, televisions and other Wi-Fi appliances. Cyber actors seize control of these devices, the affiant explained, and operate them in two layers: a command-and-control tier that issues instructions, and a client tier of infected machines, or bots, that carry them out.

The strategic danger, as the court described it, is concealment.

The judge was emphatic that the operation targeted machines, not their owners. CSIS would not seek the identity of any user, would intercept no content, and would destroy any personal information incidentally swept up.

Two further legal dimensions deserve scrutiny. The warrant rested on internet protocol addresses CSIS had gathered without a warrant — a method the Supreme Court complicated in early 2024 when it held that Canadians have a reasonable expectation of privacy in an IP address. The Federal Court navigated the tension in a companion classified decision, finding the addresses were lawfully and non-intrusively collected and led only to devices, not people. And the warrant cleared the court cleanly, with a security-cleared lawyer appointed to probe the evidence and win a requirement that CSIS use the least intrusive means available.

The court left the broader stakes in plain language. Without the warrant, it found, the foreign adversaries would regard Canada as an easy target to exploit.

The Bureau is a reader-supported publication.

Todayville is a digital media and technology company. We profile unique stories and events in our community. Register and promote your community event for free.

Published on June 14, 2026

The primary driver of the rupee’s recent movement has been the conflict between the US-Israel alliance and Iran. India has stated that the conflict has had a “ debilitating impact on the global economy and energy supplies. ” As a major importer of oil, India is vulnerable to price shocks and supply chain disruptions. The rupee hit an all-time low primarily due to the war. The currency appears poised to strengthened sharply on the back of falling crude oil prices, if President Donald Trump can at least extract the US from this conflict.

The Reserve Bank of India has actively managed the situation. It has been intervening in the forex market to prevent excessive volatility and has announced specific measures to attract dollar inflows, which has helped stabilize the currency.

The conflict between George Soros and Indian Prime Minister Narendra Modi is a clash of ideologies and interests. Soros, a supporter of his “open societies,” and is an outspoken critic of Modi’s Hindu nationalist politics. This has led the BJP to label him a foreign threat attempting to destabilize India by funding opposition parties and critical media.

Soros has openly criticized the Modi government for its policies, which he views as creating a “Hindu nationalist state” and threatening India’s secular fabric. At the World Economic Forum in 2020, he specifically expressed concern over policies in Kashmir and the Citizenship Amendment Act (CAA). His “open society” ideals fundamentally clash with the BJP’s “Hindu nationalist” agenda.

Nevertheless, George Soros has been funding opposition to Modi and many see this as his political meddling to force his political views upon the world. This has had the realization that people like George Soros and Bill Gates a specific worldview where they try to alter societies based on personal beliefs.

This dynamic duo seem to believe that solving big global problems (pandemics, climate change, extreme poverty, political instability) is good for everyone, including themselves and their descendants. A world with fewer refugees, more stable democracies, and less disease is a safer, more predictable, and more prosperous world for their businesses and families. This is their egotistic Enlightened Self-Interest.

Both have signed the Giving Pledge (started by Gates and Warren Buffett), committing to give away the majority of their wealth. They argue that if you have been extraordinarily lucky—born in the right country, with the right talents, at the right time—you have a moral obligation to use that wealth to help others, not just pass it to your children.

Unlike traditional charity (feeding the hungry today), Gates and Soros practice strategic philanthropy. They identify a root cause (e.g., malaria is caused by a parasite, weak rule of law enables corruption) and fund targeted interventions. They are not imposing a random opinion; they are imposing what they believe to be the most effective, evidence-based solution. In finance, we call this a crime as market intervention.

Because they “ IMPOSE ” their personal views upon the world using money instead of military interventions, this is why people get uncomfortable. They don’t have armies or governments, but they have two powerful tools. With tens of billions of dollars, they can fund think tanks, university departments, legal advocacy groups, and media outlets buying the press to boost their images, which Gates is famous for. They can launch global health campaigns (Gates) or pro-democracy civil society organizations (Soros) in dozens of countries simultaneously. This scale can drown out local voices or less-funded alternative views.

They have mastered the Conditional Grants. This is the key. When they give a grant, it almost always comes with strict conditions. For example, the Gates Foundation admits:

“We will give your country $10 billion for vaccines, but you must adopt these specific electronic health records, meet these quarterly reporting metrics, and co-fund the delivery system.”

Soros’ Open Society Foundations states:

“We will fund your anti-corruption NGO, but your advocacy must focus on judicial independence and freedom of information laws, not on economic nationalism or religious identity.”

This is imposing a view. They are using money to buy leverage, requiring recipients to adopt their preferred methodology and priorities. Buying politicians is very anti-democratic and funds the very corruption they claim to oppose.

These tactics are highly controversial, while we don’t criticize a local billionaire for building a hospital, but far too often the strings are hidden. There is just no Democratic Accountability. A government is voted in. A corporate board answers to shareholders. Soros and Gates answer to nobody . They have immense power to shape policy on education (Gates’ early school reform push was widely criticized as a failure that imposed a top-down model) or criminal justice (Soros’ funding for progressive prosecutors has outraged conservatives who see it as importing American ideology into their local elections).

The assumption that a computer programmer (Gates) and a hedge fund manager (Soros) know the best way to run agricultural policy in Tanzania or public health in India can seem deeply condescending. Critics call it a new age of imperial “colonialism”—extracting local problems and forcing solutions designed in Seattle or New York. They may not be kings seated on a throne, but they have self-anointed themselves to oversee the world.

Critics note that Gates made his fortune with monopolistic business practices that crushed competitors, and Soros made his by speculating on currency devaluations (e.g., “breaking the Bank of England” in 1992). They argue it’s galling for these men to now pose as the world’s moral architects.

Why Do They Do It? From their perspective, they have unique resources, a clear view of the most urgent global problems, and a moral duty to act on their evidence-based beliefs. Not acting, they’d argue, would be irresponsible.

From a neutral perspective, they trying to shape the world according to their values. They simply have an almost unimaginable amount of money to do it with. The debate is whether their specific values (liberal democracy, scientific rationalism, globalism) and methods (top-down, conditional funding) are beneficial or harmful.

From a critical perspective, they are unelected oligarchs using tax-free foundations to override local democracies and impose a narrow, technocratic worldview that serves the interests of global capital under the guise of altruism. Merely having the resources to act, and the pretense of modern philanthropy allows them to impose conditions on their gifts. This is not a heroic problem-solving venture, but a problematic power-grabbing agenda that all depends on their character.

Published on June 14, 2026

Director of National Intelligence Tulsi Gabbard said Friday that her office has uncovered “never before seen” intelligence showing the U.S. government funded more than 120 biological laboratories in more than 30 countries, including facilities in Ukraine that officials previously assessed could be exposed to Russian attack, seizure, or accidental damage during the war.

In a video statement, Gabbard said the disclosure followed “months of searching through intelligence community holdings and files” and revealed the scale of a global network that had long been kept from full public view.

Today, I’m releasing never before seen intelligence revealing new evidence of past US government funding for more than 120 biolabs in over 30 countries, including Ukraine.

In support of President Trump‘s Executive Order to end federal funding of dangerous gain of function… pic.twitter.com/RkPHnAbka9

— DNI Tulsi Gabbard (@DNIGabbard) June 12, 2026

“Today I’m releasing new evidence of long-standing U.S. government funding of more than 120 biolabs in over 30 countries,” she said.

Gabbard said some of the labs worked with dangerous and highly contagious pathogens, while others were involved in gain-of-function research, the controversial practice of modifying pathogens to study how they could become more transmissible or severe.

She said intelligence assessments had previously found that at least one U.S.-funded lab in Ukraine likely contained dangerous pathogens and remained vulnerable because of Russia’s invasion.

The disclosure marks a major reversal from years of official dismissals and media denunciations aimed at Americans who questioned the reach of U.S.-backed biological research overseas.

“Until now, evidence regarding the full existence and funding of these laboratories had been knowingly withheld from the American people,” Gabbard said. “The information surrounding the existence, history, locations and funding of these U.S.-funded biolabs has been intentionally covered up by powerful people falsely claiming that they do not exist and accusing anyone who says otherwise to be foreign assets and traitors to America.”

Gabbard tied the findings to President Trump’s executive order cutting off federal funding for gain-of-function research around the world , arguing that the newly released intelligence shows why the restrictions are necessary.

She said ODNI has also ordered intelligence agencies to step up monitoring and collection related to overseas biological laboratories, an effort she said has already produced new information clinical trials and research activities raising ethical, financial, and national security concerns.

Gabbard specifically criticized former officials and public health figures, including Anthony Fauci, accusing them of misleading Americans the existence of U.S.-funded and supported biolabs abroad.

“Politicians, so-called health professionals like Dr. Fauci, and entities within the Biden administration’s national security team lied to the American people the existence of U.S.-funded and supported biolabs, and threatened those who attempted to expose the truth,” she said.

Gabbard said ODNI will continue working with federal partners to identify where the labs are located, determine which pathogens they contain, and stop dangerous gain-of-function research that could threaten public health and national security.

“ODNI will continue to work closely with partners across the government to identify where these labs are, what pathogens they contain to end dangerous Gain-of-Function research that threatens the health and wellbeing of the American people and people around the world,” she said.

“Let the oil flow!” Trump declares Iran peace deal done

The EcoGospel According to David Suzuki

Our micro-productivity crisis

Oil prices are already falling

Canada announces plans to build dozens of AI data centers

“A very, very big win”: Vance says patience paid off on Iran

Trump visits European leaders after Iran peace deal announcement

Ottawa should end double tax on used cars