Backdoors Found in ZBT Routers Sold Globally

ZBT routers, widely sold under various brands, have been found to contain multiple backdoors, including 'SpeakingStone' and 'DarkLantern'. These implants allow unauthorized remote access and command execution. The vulnerabilities were discovered by Jacob Baines, CTO of VulnCheck, who identified that ZBT routers beacon to a compromised domain upon activation. The backdoors are designed to bypass firewalls, making them particularly dangerous. The routers are sold in numerous countries, including the US, Canada, and Australia, with ZBT's annual output estimated at 3.6 million units. The issue affects a broad range of models and poses a significant risk to users' networks. The discovery has prompted urgent calls for users to secure their devices. As of now, the extent of exploitation remains unclear.

Key Points: • ZBT routers contain multiple backdoors, including 'SpeakingStone' and 'DarkLantern'. • The backdoors allow remote command execution and bypass firewall protections. • ZBT's routers are sold globally, affecting millions of users.