VPNFilter Router Malware Adds 7 New Network Exploitation Modules

Security researchers have discovered even more dangerous capabilities in VPNFilter—the highly sophisticated multi-stage malware that infected 500,000 routers worldwide in May this year, making it much more widespread and sophisticated than earlier.

At… Continue reading VPNFilter Router Malware Adds 7 New Network Exploitation Modules

Thousands of MikroTik Routers Hacked to Eavesdrop On Network Traffic

Last month we reported about a widespread crypto-mining malware campaign that hijacked over 200,000 MikroTik routers using a previously disclosed vulnerability revealed in the CIA Vault 7 leaks.

Now Chinese security researchers at Qihoo 360 Netlab hav… Continue reading Thousands of MikroTik Routers Hacked to Eavesdrop On Network Traffic

VPNFilter Attack Hits Chlorine Plant in Ukraine

Ukraine’s internal security agency, the SBU, reports blocking a VPNFilter attack against a plant that produces liquid chlorine used for treating the water supply in the country. The SBU has not provided technical details about the attack, but sa… Continue reading VPNFilter Attack Hits Chlorine Plant in Ukraine

Hide-N-Seek IoT Botnet Starts Infecting Database Servers

Hide ‘N Seek (HNS), an IoT botnet known for infecting home routers, IP cameras and digital video recorders, has recently started compromising NoSQL database servers. HNS was discovered by researchers from antivirus firm Bitdefender in January an… Continue reading Hide-N-Seek IoT Botnet Starts Infecting Database Servers

VPNFilter Targets More Devices Than Initially Reported

The sophisticated VPNFilter botnet that enslaved more than 500,000 routers and network-attached storage (NAS) devices is capable of infecting more devices than initially believed. The initial reports about VPNFilter identified 16 device models from Li… Continue reading VPNFilter Targets More Devices Than Initially Reported

VPNFilter Continues to Target Devices in Ukraine

The VPNFilter botnet that compromised more than 500,000 routers and network-attached storage devices from around the world was recently disrupted, but is trying to make a comeback in Ukraine. Researchers from security firms Jask and GreyNoise Intellig… Continue reading VPNFilter Continues to Target Devices in Ukraine

Router Attack: Users Should Reset Routers to Factory Default, Not Just Reboot

The FBI and the Internet Crime Complaint Center (IC3) have issued a public service announcement advising owners of small-office and home-office routers to power cycle their devices to remove a new piece of malware. However, users should actually reset… Continue reading Router Attack: Users Should Reset Routers to Factory Default, Not Just Reboot

Hacker Group Targeting Industrial Controllers Expands Its Operations

The group behind the Triton malware that triggered an emergency shutdown last year at a critical infrastructure organization in the Middle East is still active and has expanded its operations to industrial controllers in facilities in other regions of… Continue reading Hacker Group Targeting Industrial Controllers Expands Its Operations

Nation State Actor Builds Massive Army of Compromised Routers

A hacker group with suspected ties to the Russian government has infected more than 500,000 routers and other devices with highly sophisticated malware, possibly in preparation for future large-scale attacks. According to researchers from Cisco System… Continue reading Nation State Actor Builds Massive Army of Compromised Routers