I said it seemed like it might be a novel addition to their practice, not to the state of the art. The question isn’t “is this possible and has anyone ever don

I said it seemed like it might be a novel addition to their practice, not to the state of the art. The question isn’t “is this possible and has anyone ever done it” - it was was “has the FBI ever used a botnet’s existing C&C patch all the infected hosts”? It doesn’t seem like it, but I don’t track this stuff closely so I’m happy to be corrected.