The New Oil9h ago

#AryStinger #botnet infected thousands of #DLink routers worldwide

https://www.bleepingcomputer.com/news/security/arystinger-botnet-infected-thousands-of-d-link-routers-worldwide/

#cybersecurity

AryStinger botnet infected thousands of D-Link routers worldwide

A previously undocumented malware botnet named AryStinger has compromised more than 4,000 outdated routers to turn them into proxies for malicious traffic.

BleepingComputer
The Threat Codex10h ago
More Than 4,000 Legacy Routers Compromised by AryStinger, Turned into Global Attack Proxies for Hackers
#AryStinger
https://blog.xlab.qianxin.com/arystinger-botnet-hijacks-legacy-routers-for-global-attacks-en/
More Than 4,000 Legacy Routers Compromised by AryStinger, Turned into Global Attack Proxies for Hackers

Background On May 20, 2026, the Ministry of State Security's WeChat official account published an article "Your internet is slow, and the culprit turns out to be this!", highlighting that outdated routers are becoming a key entry point for threat actors to conduct cyber espionage. Inspired by this article, we

奇安信 X 实验室
CyberVeille.ch23h ago

📢 AryStinger : un botnet compromet plus de 4 300 routeurs anciens pour des attaques mondiales
📝 ## 🔍 Contexte

Publié le 17 juin 2026 par les chercheurs Alex.Turing et Acey9 du laborato...
📖 cyberveille : https://cyberveille.ch/posts/2026-06-21-arystinger-un-botnet-compromet-plus-de-4-300-routeurs-anciens-pour-des-attaques-mondiales/
🌐 source : https://blog.xlab.qianxin.com/arystinger-botnet-hijacks-legacy-routers-for-global-attacks-en/
#AryStinger #CVE_2013_3307 #Cyberveille

AryStinger : un botnet compromet plus de 4 300 routeurs anciens pour des attaques mondiales

🔍 Contexte Publié le 17 juin 2026 par les chercheurs Alex.Turing et Acey9 du laboratoire XLab de QiAnXin, cet article présente une analyse technique détaillée du botnet AryStinger, découvert le 12 mars 2026 via le système de surveillance réseau XLab. 🎯 Campagne et vecteurs d’infection Les attaquants exploitent des vulnérabilités anciennes pour compromettre des équipements réseau : CVE-2013-3307 et CVE-2016-5681 : ciblant des routeurs Linksys et D-Link basés sur les puces RTL819X (ère 2012-2015) CVE-2025-11837 : ciblant des périphériques NAS (détecté le 26 avril 2026) Le vecteur initial est un script shell téléchargeant et exécutant l’échantillon AryStinger depuis le serveur hgodpcx.ajb8.com.

CyberVeille
Daniel Marsh1d ago

Thousands of D-Link DIR-850L and DIR-818LW routers are compromised by the AryStinger botnet, exploiting vulnerabilities some over a decade old. This sophisticated botnet doesn't just slow your internet; it hijacks DNS, exfiltrates personal data, and maps your internal network, making your router a launchpad for further attacks. Discover the full scope of this threat and crucial mitigation steps.

https://www.tpp.blog/lyvtjtm

#cybersecurity #arystinger #dlink

🤖 This post was AI-generated.

Analyst2071d ago

AryStinger Botnet Exploits Flaws in Thousands of D-Link Routers

Meet AryStinger, a sneaky botnet that's hijacked over 4,000 outdated D-Link routers worldwide, turning them into a powerful tool for hackers to carry out stealthy scans and attacks. This malware mastermind breaks down massive tasks into tiny chunks, distributing them across its zombie network for lightning-fast execution.

https://osintsights.com/arystinger-botnet-exploits-flaws-in-thousands-of-d-link-routers?utm_source=mastodon&utm_medium=social

#Arystinger #Botnet #DlinkRouters #IotExploits #MalwareOperations

AryStinger Botnet Exploits Flaws in Thousands of D-Link Routers

Learn how AryStinger botnet exploits D-Link routers, infecting 4,000+ devices. Discover the threat and protect your network now with expert insights.

OSINTSights