threat-intel
AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network
Medium
Summary
A new malware family, dubbed AryStinger, is exploiting vulnerabilities in older Realtek RTL819X routers to create a reconnaissance network. Approximately 4,300 routers, primarily D-Link models, have been infected, scanning the internet and relaying data back to an operator. This operation leverages outdated hardware and CVEs to establish a covert infrastructure for initial attack stages, mirroring tactics used in previous router-based proxy networks.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data