14,000 routers hijacked by KadNap malware to power a hidden proxy botnet

Security researchers have uncovered a malware operation that has infected about 14,000 routers and network devices, most of them produced by Asus, and incorporated them into a distributed proxy network used to carry internet traffic for cybercrime. The malware, called KadNap, was discovered by researchers at Black Lotus Labs, the research division of Lumen Technologies. According to Chris Formosa, a researcher at Black Lotus Labs who spoke with Ars Technica, the malware spreads by exploiting vulnerabilities that device owners have not patched. The high number of infected Asus routers appears linked to attackers obtaining reliable exploits that affect those models.... [Continue Reading]