Another top router maker accused of firmware having backdoors — Chinese giant Zbtlink halts downloads to fix issue
- VulnCheck CTO Jacob Baines reported Zbtlink routers shipped with a built‑in backdoor dubbed ENDLESSDOORS, allowing remote root commands and reverse shells
- Zbtlink denied malicious intent, calling it an after‑sales maintenance feature, but quietly pulled vulnerable firmware and promised patches
- Researchers warn all firmware images are hijackable; mitigation advice is to replace devices or enforce strict egress controls and treat LAN as untrusted
Chinese networking firm Zbtlink has been accused of shipping its products with a backdoor - and while the company denies the allegations, it has still apparently moved to address the issue.
CTO of cybersecurity company VulnCheck, Jacob Baines, recently published an in-depth report stating a Zbtlink device he runs “continuously attempts to reach a command-and-control server on the internet.”
“Zbtlink routers phone home, waiting for orders. Not because they were hacked. Because they were shipped that way.”
Detention and escape attempts
Baines dubbed the flaw “ENDLESSDOORS” and...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
