Linux routers and modems targeted by ‘Psybot’
Researchers estimate that 100,000 users could be part of a botnet targeting badly-configured Linux modems and routers.
Researchers have warned of a new botnet worm called psyb0t' that targets both exploited DSL modems and routers.
According to a blog post, DroneBL researchers said that this was the first known botnet targeting home routers and cable/dsl modems, with an estimated 100,000 devices infected.
They said: "The technique is one to be extremely concerned about because most end users will not know their network has been hacked, or the router is exploited.
"This means that in the future, this could be an attack vector for the theft of personally identifying information."
DroneBL said that most of the vulnerable devices were mipsel devices that had weak usernames and passwords or other errors.
They commented that the author of the worm used sophisticated programming language which used different strategies to break in to devices, and that action needed to be taken before the worm grew larger.
The botnet was found as part of DroneBL investigation into DDoS attacks against their infrastructure.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
-
Google is scrapping its dark web report featureNews Google said while the dark web report feature offered “general information”, the tool didn’t provide “helpful next steps” for users potentially impacted by a breach.
-
AI means you're probably going to need bigger developer teamsAnalysis Software developers may be forgiven for worrying about their jobs in 2025, but the end result of AI adoption will probably be larger teams, not an onslaught of job cuts.
-
Europol hails triple takedown with Rhadamanthys, VenomRAT, and Elysium sting operationsNews The Rhadamanthys infostealer operation is one of the latest victims of Europol's Operation Endgame, with more than a thousand servers taken down
-
Seized database helps Europol snare botnet customers in ‘Operation Endgame’ follow-up stingNews Europol has detained several people believed to be involved in a botnet operation as part of a follow-up to a major takedown last year.
-
Horabot campaign targeted businesses for more than two years before finally being discoveredNews The newly-discovered Horabot botnet has attacked companies in the accounting, investment, and construction sectors in particular
-
UK crime fighters wrangle “several thousand” potential cyber criminals in DDoS-for-hire honeypotNews The sting follows a recent crackdown on DDoS-for-hire services globally
-
Brand-new Emotet campaign socially engineers its way from detectionNews This latest resurgence follows a three-month hiatus and tricks users into re-enabling dangerous VBA macros
-
US begins seizure of 48 DDoS-for-hire services following global investigationNews Six people have been arrested who allegedly oversaw computer attacks launched using booters
-
Microsoft says “it’s just too difficult” to effectively disrupt ransomwareNews The company details its new approach to combatting cyber crime as the underground industry drains $6 trillion from the global economy
-
Will triple extortion ransomware truly take off?In-depth Operators are now launching attacks with three extortion layers, but there are limitations to this model