"These issues were found by our engineers and not actively found in the wild. For the sake of not guiding potential threat actors towards finding and exploiting these internally discovered issues, we are not sharing technical details about these flaws that they contained. " According to Wednesday's FAQ, FBI agents informed WatchGuard in November that about 1 percent of the firewalls it had sold had been infected by Cyclops Blink a new strain of malware developed by Sandworm to replace a botnet FBI dismantled in 2018. Three months after learning of the infections from the FBI, WatchGuard published the detection tool and the accompanying 4-Step Diagnosis and Remediation Plan for infected devices. The company obtained the CVE-2022-23176 designation a day later, on February 24. Even after all of these steps, including obtaining the CVE, however, the company still did not explicitly disclose the critical vulnerability that had been fixed in the May 2021 software updates.