Linux routers and modems targeted by ‘Psybot’
Researchers estimate that 100,000 users could be part of a botnet targeting badly-configured Linux modems and routers.

Researchers have warned of a new botnet worm called psyb0t' that targets both exploited DSL modems and routers.
According to a blog post, DroneBL researchers said that this was the first known botnet targeting home routers and cable/dsl modems, with an estimated 100,000 devices infected.
They said: "The technique is one to be extremely concerned about because most end users will not know their network has been hacked, or the router is exploited.
"This means that in the future, this could be an attack vector for the theft of personally identifying information."
DroneBL said that most of the vulnerable devices were mipsel devices that had weak usernames and passwords or other errors.
They commented that the author of the worm used sophisticated programming language which used different strategies to break in to devices, and that action needed to be taken before the worm grew larger.
The botnet was found as part of DroneBL investigation into DDoS attacks against their infrastructure.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
-
RSAC Conference 2025: The front line of cyber innovation
ITPro Podcast Ransomware, quantum computing, and an unsurprising focus on AI were highlights of this year's event
-
Anthropic CEO Dario Amodei thinks we're burying our heads in the sand on AI job losses
News With AI set to hit entry-level jobs especially, some industry execs say clear warning signs are being ignored
-
Seized database helps Europol snare botnet customers in ‘Operation Endgame’ follow-up sting
News Europol has detained several people believed to be involved in a botnet operation as part of a follow-up to a major takedown last year.
-
Horabot campaign targeted businesses for more than two years before finally being discovered
News The newly-discovered Horabot botnet has attacked companies in the accounting, investment, and construction sectors in particular
-
UK crime fighters wrangle “several thousand” potential cyber criminals in DDoS-for-hire honeypot
News The sting follows a recent crackdown on DDoS-for-hire services globally
-
Brand-new Emotet campaign socially engineers its way from detection
News This latest resurgence follows a three-month hiatus and tricks users into re-enabling dangerous VBA macros
-
US begins seizure of 48 DDoS-for-hire services following global investigation
News Six people have been arrested who allegedly oversaw computer attacks launched using booters
-
Microsoft says “it’s just too difficult” to effectively disrupt ransomware
News The company details its new approach to combatting cyber crime as the underground industry drains $6 trillion from the global economy
-
Will triple extortion ransomware truly take off?
In-depth Operators are now launching attacks with three extortion layers, but there are limitations to this model
-
Beating the bad bots: Six ways to identify and block spam traffic
In-depth Not all traffic is good. Learn how to prevent bad bots from overrunning your website