Botnet JDY: One Thousand Five Hundred Devices to Watch You Without Permission

Published on June 11, 2026 | Translated from Spanish

The JDY botnet, linked to China, has surpassed 1,500 active devices for conducting cyber reconnaissance. This network of infected equipment can steal personal data or affect digital services. For citizens, this means an increased risk of bank fraud, identity theft, and potential internet disruptions. It is recommended to keep systems updated and use antivirus software.

A dark server rack room with hundreds of blinking network cables converging into a single glowing central switch, a translucent digital spiderweb overlay connecting 1,500 infected devices across a world map, malicious code streams flowing from the switch into a laptop showing banking login screens, red warning alerts flashing on a monitor displaying a hijacked webcam feed, cinematic technical illustration style, dramatic blue and red lighting, photorealistic hardware details, fiber optic glow, surveillance theme, motion blur on data packets, ultra-detailed circuit board textures

How this covert surveillance network operates 🕵️

JDY spreads through vulnerabilities in routers and IoT devices, such as cameras or sensors. Once infected, the equipment scans networks for other targets, collecting traffic information and credentials. The data is sent to remote control servers. It does not carry out direct attacks, but its reconnaissance work can precede larger intrusions. Protecting yourself involves changing default passwords and disabling unnecessary services.

The spy that was spying on you from your home router 👁️

Now it turns out your old router, the one you bought on sale, might be working for a Chinese botnet. While you watch memes, the device is putting in overtime spying on your passwords. The worst part: you don't even get paid for the device's use. If you notice your internet is slow, it's not Netflix, it's JDY doing reconnaissance. Change the password and turn it off from time to time.