D-Link, Ubiquiti devices hijacked by hackers to plunder stolen bandwidth

https://cdn.mos.cms.futurecdn.net/c6nDwMzYYwipHEZpZkRZb4-2560-80.jpg
  • Attackers exploited vulnerable devices to install legitimate bandwidth-sharing software and hijack internet connections
  • Compromised systems were covertly added to proxy networks, enabling anonymous criminal activity
  • Campaign affected at least 143 devices across 34 countries, highlighting patching and access-control failures

When threat actors break into a system, they don’t need to install malware to make use of the compromised endpoint - they can install perfectly legal, normal software, and still walk away with a paycheck they didn’t earn.

A recent proxyjacking campaign spotted by security researchers GreyNoise impacted hundreds of devices in dozens of countries.

Proxyjacking

Proxyjacking is a type of attack in which a device is hijacked and assimilated into a proxy network. Usually, cybercriminals would break into a computer, install malware and create a proxy network of their own, which they can later rent or use themselves. Threat actors are always in need of “clean” and unflagged devices and...

Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE

Read more