3 ms·
Researchers Discover 40k-Strong EOL Router, IoT Botnet
- gnabgib 3y agoThe article from the security researchers is a fascinating read: https://blog.lumen.com/the-darkside-of-themoon/ https://blog.lumen.com/the-darkside-of-themoon/
- tonymet 3y agoThis problem is only worsening. I recommend running nmap vulners or flan on a cron at home against your network. I found multiple CVEs in my brand new (2023) router. They were running old versions of dropbear SSH, dnsmasq that had vulns. Most routers are just cobbled together from years-old OpenWRT releases or worse. I also found vulns on a brother printer, a smart plug, wifi-enabled air filter. Everything in your house that has wifi probably has a vuln on it. https://github.com/vulnersCom/nmap-vulners https://github.com/vulnersCom/nmap-vulners https://github.com/cloudflare/flan https://github.com/cloudflare/flan I urge everyone to check you'll definitely find a CVE
- doublepg23 3y agoWow, I'm running flan now - what a cool tool! Thanks for the tip.
- tonymet 3y agoGreat to hear it i hope it helps. Let me know if you find something. It’s a often under looked area of cybersecurity at home.
- brokenmachine 3y agoI did my router and it showed like a thousand CVEs for an out of date dnsmasq but from the few I did randomly look at, they just allow to crash the router so I guess DOS, not RCE or anything.