Skip to content
NewA calmer, faster ZeroHour

Thousands of Asus routers are being hit with stealthy, persistent backdoors

Ars Technica · Security ()1 min read3 · 1 read
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-39780
Authenticated OS Command Injection in ASUS RT-AX55 Routers
8.840%KEVPoC ×7
KEV

From the original article

1 min read at arstechnica.com

GreyNoise said it detected the campaign in mid-March and held off reporting on it until after the company notified unnamed government agencies. That detail further suggests that the threat actor may have some connection to a nation-state. The company researchers went on to say that the activity they observed was part of a larger campaign reported last week by fellow security company Sekoia.

Ars Technica · Security

arstechnica.com

Read the full article at Ars Technica · Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.