Back Securityaffairs.Co

KadNap bot compromises 14,000+ devices to route malicious traffic

Securityaffairs.Co •Pierluigi Paganini • March 11, 2026

KadNap malware infects 14,000+ edge devices, mainly Asus routers, turning them into a stealth proxy botnet used to route malicious internet traffic. KadNap malware infects more than 14,000 edge devices, mainly ASUS routers, and turns them into a proxy botnet used to route malicious traffic. First detected in August 2025, the campaign heavily targets the […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

KadNap Malware Infects 14,000+ Edge Devices for Proxy Botnet Operations The KadNap malware has infected over 14,000 edge devices, primarily targeting ASUS routers, to create a decentralized proxy botnet. This botnet utilizes a custom version of the Kademlia Distributed Hash Table protocol, complicating efforts to identify and disrupt its command-and-control infrastructure. The malware has been active since August 2025, raising significant concerns about its potential for cybercrime activities. 22 sources 67

Extracted Entities

KadNap bot compromises 14,000+ devices to route malicious traffic

The full story

Extracted Entities

Attack Types (2)

Malware (1)

MITRE ATT&CK (1)

Platforms (1)