Zerobot Malware Targets Tenda Routers via Command Injection Vulnerabilities

Zerobot Malware Targets Tenda Routers via Command Injection Vulnerabilities

First seen 3 Mar 2026, 18:10 UTC GbhackersCybersecuritynews 51.6

Article Content

Browse articles
ThreatCluster

The Zerobot malware campaign, now in its ninth iteration, is exploiting command injection vulnerabilities in Tenda AC1206 routers and the n8n workflow automation platform. This resurgence of the Mirai-based botnet is actively deploying malware across exposed networks, affecting users of these devices.

Timeline

2026-03-03
Zerobot malware campaign reported targeting Tenda routers
Date unknown
Zerobot campaign identified as operating on its ninth iteration
Date unknown
Malware deployment across exposed networks confirmed