They applied for and received a Search Warrant (5018) to cover all activity described in the article: >The FBI will identify a list of U.S.-based routers infec

They applied for and received a Search Warrant (5018) to cover all activity described in the article: >The FBI will identify a list of U.S.-based routers infected with the malware, as described in Attachment A. >The FBI seeks authorization under Federal Rule of Criminal Procedure 41(b)(6)(B) to remotely search those routers and seize the evidence and instrumentalities of the hackers' criminal offenses, as described in Attachment B. >As part of this search and seizure, the FBI will remove the malware from the infected routers and take limited, reversible steps to prevent re-infection. To GP’s questions, the scenarios would be handled as in any other search warrant. Though I’d presume this is rather unusual and to increase the likelihood of future approval, the agent would try to avoid stumbling into having to decide if some completely unrelated crime needs to be prosecuted. Aside from this, it’s intriguing that they state the changes they planned to make to the routers would be reversible. I wonder how practical this might be if needed, given potential shift in IP. Also, when, if ever the owners will be notified of the activity. This may be covered in one of the filings.