AryStinger botnet infected thousands of D-Link routers worldwide
More than 4,000 out-of-date routers have been infiltrated by the previously unreported malware botnet AryStinger, which uses them as proxies for harmful communications.
The virus transforms infected devices into remotely controlled "executors" that may carry out scanning, proxying, tunneling, command execution, and other tasks on behalf of the attacker, according to researchers from Qianxin's XLab threat intelligence team.
According to XLab researchers, an attacker can divide a large scanning task into several smaller parts and distribute them to various Executors for parallel execution.
The attacker can effectively finish the initial "footprinting" tasks thanks to this distributed-like design, which offers excellent guarantee for the efficiency and success rate of ensuing intrus...