{"id":49617,"date":"2023-03-08T00:58:45","date_gmt":"2023-03-08T00:58:45","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2023\/03\/08\/draytek-routers-under-active-attack-and-theres-no-patch-the-register\/"},"modified":"2023-03-08T01:00:00","modified_gmt":"2023-03-08T01:00:00","slug":"draytek-routers-under-active-attack-and-theres-no-patch-the-register","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2023\/03\/08\/draytek-routers-under-active-attack-and-theres-no-patch-the-register\/","title":{"rendered":"DrayTek routers under active attack and there’s no patch \u2022 The Register"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n

For those who’re nonetheless utilizing post-support DrayTek Vigor routers it might be time to junk them, or give you another workaround, as a crafty malware variant is establishing store within the equipment.<\/p>\n

The operators behind the Hiatus malware marketing campaign are hijacking DrayTek Vigor router fashions 2960 and 3900 powered by MIPS, i386 and Arm-based processors to in flip assault companies in North and Latin America in addition to in Europe, in response to researchers with Lumen’s Black Lotus Labs risk intelligence unit.<\/p>\n

The 2 DrayTek router fashions reached end-of-life, in assist phrases, in December 2021. They’re nonetheless broadly used, with greater than 4,000 susceptible containers uncovered to the web, in response to scans. The Hiatus crooks have contaminated at the least 100 of them thus far, Black Lotus researchers Danny Adamitis and Steve Rudd wrote in a report<\/a>.<\/p>\n

\n