Quad7 Botnet Expands to Target SOHO Routers and VPN Appliances
Using a combination of known and unknown security holes, the operators of the enigmatic Quad7 botnet are actively evolving, compromising multiple manufacturers of SOHO routers and VPN gadgets.
Devices from TP-LINK, Zyxel, Asus, Axentra, D-Link, and NETGEAR are among the targets, according to a recent study by the French cybersecurity firm Sekoia.
In an effort to improve stealth and circumvent the monitoring capabilities of their operational relay boxes (ORBs), the operators of the Quad7 botnet seem to be developing new tools, adding a new backdoor, and investigating new protocols, according to researchers Felix Aimé, Pierre-Antoine D., and Charles M.
In October 2023, independent researcher Gi7w0rm made Quad7, also known as 7777, publicly known by exposing the activity cluster's t...