Asus routers hijacked to power dangerous cybercrime proxy network - here's what we know

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Asus Routers Compromised in Major Cybercrime Botnet Operation A new strain of malware, dubbed KadNap, has infected over 14,000 Asus routers, forming a botnet that powers a cybercrime proxy network known as Doppelgänger. The botnet utilizes a custom Kademlia Distributed Hash Table (DHT) protocol, enhancing its resilience against takedown efforts. Black Lotus Labs has identified this extensive network, which is actively being exploited in the wild. The malware allows attackers to leverage the compromised routers for various malicious activities, significantly expanding the scope of the cybercrime operation. The ongoing exploitation poses a serious risk to affected users and networks, as the botnet continues to grow. Security experts are urging immediate action to mitigate the risks associated with this malware strain. 3 sources 67