Linux routers and modems targeted by ‘Psybot’
Researchers estimate that 100,000 users could be part of a botnet targeting badly-configured Linux modems and routers.
Researchers have warned of a new botnet worm called psyb0t' that targets both exploited DSL modems and routers.
According to a blog post, DroneBL researchers said that this was the first known botnet targeting home routers and cable/dsl modems, with an estimated 100,000 devices infected.
They said: "The technique is one to be extremely concerned about because most end users will not know their network has been hacked, or the router is exploited.
"This means that in the future, this could be an attack vector for the theft of personally identifying information."
DroneBL said that most of the vulnerable devices were mipsel devices that had weak usernames and passwords or other errors.
They commented that the author of the worm used sophisticated programming language which used different strategies to break in to devices, and that action needed to be taken before the worm grew larger.
The botnet was found as part of DroneBL investigation into DDoS attacks against their infrastructure.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
-
What does modern security success look like for financial services?Sponsored As financial institutions grapple with evolving cyber threats, intensifying regulations, and the limitations of ageing IT infrastructure, the need for a resilient and forward-thinking security strategy has never been greater
-
Yes, legal AI. But what can you actually do with it? Let’s take a look…Sponsored Legal AI is a knowledge multiplier that can accelerate research, sharpen insights, and organize information, provided legal teams have confidence in its transparent and auditable application
-
Seized database helps Europol snare botnet customers in ‘Operation Endgame’ follow-up stingNews Europol has detained several people believed to be involved in a botnet operation as part of a follow-up to a major takedown last year.
-
Horabot campaign targeted businesses for more than two years before finally being discoveredNews The newly-discovered Horabot botnet has attacked companies in the accounting, investment, and construction sectors in particular
-
UK crime fighters wrangle “several thousand” potential cyber criminals in DDoS-for-hire honeypotNews The sting follows a recent crackdown on DDoS-for-hire services globally
-
Brand-new Emotet campaign socially engineers its way from detectionNews This latest resurgence follows a three-month hiatus and tricks users into re-enabling dangerous VBA macros
-
US begins seizure of 48 DDoS-for-hire services following global investigationNews Six people have been arrested who allegedly oversaw computer attacks launched using booters
-
Microsoft says “it’s just too difficult” to effectively disrupt ransomwareNews The company details its new approach to combatting cyber crime as the underground industry drains $6 trillion from the global economy
-
Will triple extortion ransomware truly take off?In-depth Operators are now launching attacks with three extortion layers, but there are limitations to this model
-
Beating the bad bots: Six ways to identify and block spam trafficIn-depth Not all traffic is good. Learn how to prevent bad bots from overrunning your website