10 ms·
From the report: The initial infection doesn't appear to exploit any vulnerabilities in Cisco devices. Rather, attackers seem to be taking advantage of routers
by joosters 11y ago
From the report:
The initial infection doesn't appear to exploit any vulnerabilities in Cisco devices. Rather, attackers seem to be taking advantage of routers that use passwords that are factory default
Why then are you assuming that Cisco backdoored its products?
- soylentcola 11y agoFor someone looking to cause trouble using other people's routers, I can't imagine it's terribly difficult to run a Shodan search and attempt login with default credentials. The whole thing can be scripted and once you have a list of vulnerable devices, you upload the modified firmware and you own the router. I don't do this sort of thing but I was under the impression that it's pretty common (hence the importance of setting strong passwords on any device accessible to WAN).