New clusters target Zyxel and Ruckus

New clusters target Zyxel and Ruckus

4 months ago
Anonymous $genLyrxdTY

https://www.bleepingcomputer.com/news/security/quad7-botnet-targets-more-soho-and-vpn-routers-media-servers/

The Quad7 botnet is evolving its operation by targeting additional SOHO devices with new custom malware for Zyxel VPN appliances, Ruckus wireless routers, and Axentra media servers.

This comes in addition to the TP-Link routers reported initially by Sekoia, from where the botnet got its name due to targeting port 7777, and also the ASUS routers targeted by a separate cluster discovered by Team Cymru two weeks later.