ORB Networks Leverages Compromised IoT Devices for Masked Cyberattacks

Back Cyberpress

ORB Networks Leverages Compromised IoT Devices for Masked Cyberattacks

Cyberpress • February 13, 2026

Share: View original

Detected in July 2025, the campaign used a zero - day to breach firewalls ... Mandiant links UNC3886 to China- espionage, known for zero - days ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ORB Networks Use Compromised IoT Devices to Conceal Cyberattacks ORB networks, utilizing compromised IoT devices and SOHO routers, have been identified as advanced tools for masking cyberattacks. These networks blend malicious traffic with legitimate user activity, making it difficult for security teams to trace the origin of attacks. The infrastructure leverages rented Virtual Private Servers to enhance anonymity. 3 sources 51

Extracted Entities

APT Groups (1)

Attack Types (1)

Zero-day Exploit

Countries (1)