Canada's CSIS Authorized to Hack State-Linked Botnets Targeting Critical Infrastructure

Canada's Federal Court has granted the Canadian Security Intelligence Service (CSIS) permission to hack into privately owned routers and internet-connected devices to neutralize two state-linked botnets. This unprecedented ruling, issued by Justice Catherine Kane, allows CSIS to disrupt malware that compromises devices, turning them into parts of a botnet aimed at attacking Canadian critical infrastructure. The warrant was initially granted in May 2024 and renewed later that year, but details were only made public in June 2026 due to national security redactions. The botnets are assessed to likely include threats from Chinese state actors, specifically linked to groups like Volt Typhoon. The malware allows adversaries to exploit compromised devices for covert access to sensitive systems. CSIS aims to remove these compromised devices to prevent potential disruptions to critical infrastructure. The ruling highlights the growing urgency of addressing foreign cyber threats within Canada.

Key Points: • CSIS received judicial permission to hack into compromised devices to neutralize botnets. • The botnets are likely linked to Chinese state actors, posing imminent risks to critical infrastructure. • The warrant was first granted in May 2024, with details released only in June 2026.