Dysphoria IoT Botnet Adopts Blockchain C2 and Victim Relays After JackSkid Takedown
The Dysphoria IoT botnet, tracked by CNCERT and XLab (Qi'anxin), has evolved to use blockchain-based name services and infected-device relays following a…
Tag: Linksys
China-Linked JDY Botnet Expands to Over 1,500 Devices for Cyber Reconnaissance
Cybersecurity researchers at Lumen's Black Lotus Labs have identified a significant expansion of the JDY botnet, a covert network linked to China-nexus…
TheMoon Malware: Used in 5socks and Anyproxy Residential Proxy Services
TheMoon is a malware family that infected years-old Linksys and Cisco routers, turning them into residential proxies sold by services like 5socks…
Linksys: Networking Hardware Manufacturer
Linksys is the vendor of the E1700 router affected by CVE-2025-9528, a command-injection vulnerability used by Dysphoria for propagation. The vendor did…
AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network
A new malware family named AryStinger, discovered by QiAnXin's XLab, has infected at least 4,300 legacy routers to create a distributed reconnaissance…
CVE-2013-3307: Linksys Router Vulnerability Exploited by AryStinger Malware
CVE-2013-3307 is a vulnerability in certain Linksys router models that allows remote attackers to execute arbitrary code. This flaw, dating from 2013,…