{"id":18277,"date":"2018-11-07T16:32:06","date_gmt":"2018-11-07T16:32:06","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/29489\/IoT-Botnet-Infects-100-000-Routers-To-Send-Spam.html"},"modified":"2018-11-07T16:32:06","modified_gmt":"2018-11-07T16:32:06","slug":"iot-botnet-infects-100000-routers-to-send-spam","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/iot-botnet-infects-100000-routers-to-send-spam\/","title":{"rendered":"IoT Botnet Infects 100,000 Routers To Send Spam"},"content":{"rendered":"<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/zdnet3.cbsistatic.com\/hub\/i\/2018\/11\/07\/e7f59ee6-e054-4a59-a9a4-033a57f5d800\/9962bc0a119c8f424daa75a3c55706e6\/email-pam.png\" class=\"\" alt=\"email-pam.png\"\/><\/span><\/p>\n<p>A new botnet made up of roughly 100,000 home routers has silently grown over the past two months. According to current evidence, the botnet&#8217;s operators appear to use the infected routers to connect to webmail services and are most likely sending out massive email spam campaigns.<\/p>\n<p>First spotted this September by the Netlab team at Qihoo 360, the botnet has been exploiting a well-known five-year-old vulnerability to spread.<\/p>\n<div class=\"relatedContent alignRight\">\n<h3 class=\"heading\"><span class=\"int\">More security news<\/span><\/h3>\n<\/div>\n<p>The vulnerability was discovered in 2013 by security researchers from DefenseCode and resides in the Broadcom UPnP SDK, a piece of software that was embedded in thousands of router models from multiple vendors.<\/p>\n<p>The vulnerability allows an attacker to execute malicious code on a remote vulnerable router without needing to authenticate, and it&#8217;s the worse kind of vulnerability that exists in the world of Internet-connected devices.<\/p>\n<p>Several botnets have abused this flaw in the past, but Netlab has nicknamed this latest botnet BCMUPnP_Hunter. The name comes from the botnet&#8217;s constant scans for routers with exposed UPnP interfaces (port 5431).<\/p>\n<p>Over the last two months, the Chinese researchers say they&#8217;ve seen BCMUPnP_Hunter scans originating from over 3.37 million IPs, but the number of daily active devices has been usually at around 100,000. Victims are spread out pretty evenly across the globe, but the biggest concentration of infected routers are in India, China, and the US.<\/p>\n<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/article\/iot-botnet-infects-100000-routers-to-send-hotmail-outlook-and-yahoo-spam\/\" class=\"lazy\" alt=\"bcmupnphunterdailybots.png\" height=\"auto\" width=\"370\" data-original=\" https:\/\/zdnet3.cbsistatic.com\/hub\/i\/r\/2018\/11\/07\/9f0b6e2d-8938-40c1-85ff-8549d8aee73c\/resize\/370xauto\/0100a85a122b624dfc9b246cd3295a59\/bcmupnphunterdailybots.png\"\/><\/span><noscript><\/p>\n<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/zdnet3.cbsistatic.com\/hub\/i\/r\/2018\/11\/07\/9f0b6e2d-8938-40c1-85ff-8549d8aee73c\/resize\/370xauto\/0100a85a122b624dfc9b246cd3295a59\/bcmupnphunterdailybots.png\" class=\"\" alt=\"bcmupnphunterdailybots.png\" height=\"auto\" width=\"370\"\/><\/span><\/p>\n<p><\/noscript> <span class=\"credit\">Image: Qihoo 360 Netlab<\/span><\/p>\n<p>But setting aside its considerable size, this new botnet is also different from the vast majority of IoT botnets that are currently active today. Most of today&#8217;s botnets rely on source code that has been leaked online, but in regards to this, BCMUPnP_Hunter is a totally new beast.<\/p>\n<section class=\"sharethrough-top\" data-component=\"medusaContentRecommendation\" data-medusa-content-recommendation-options=\"{&quot;promo&quot;:&quot;promo_ZD_recommendation_sharethrough_top_in_article_desktop&quot;,&quot;spot&quot;:&quot;dfp-in-article&quot;}\">\n<\/section>\n<p>&#8220;We did not find similar code using search engines,&#8221; said Hui Wang, one of the two Netlab researchers who analyzed the botnet&#8217;s source.<\/p>\n<p>&#8220;It seems that the author has profound skills and is not a typical script kid,&#8221; Hui added. In a <a href=\"http:\/\/blog.netlab.360.com\/bcmpupnp_hunter-a-100k-botnet-turns-home-routers-to-email-spammers-en\/\" target=\"_blank\" rel=\"noopener noreferrer\">technical report<\/a> published today, the researcher also goes on to highlight the botnet&#8217;s complex multi-stage infection mechanism, which is something unique compared to existing threats.<\/p>\n<p>According to Hui, once BCMUPnP_Hunter finishes this multi-stage infection process and gains a foothold on a vulnerable device, it uses it to hunt for other vulnerable routers. But he says the botnet also hides a secondary function. This secondary function allows the botnet to use infected the routers as proxy nodes and relay connections from the botnet&#8217;s operators to remote IPs.<\/p>\n<p>At the time of writing, Hui said that all the IPs Netlab has observed BCMUPnP_Hunter connecting to are IP addresses owned by webmail services such as Yahoo, Outlook, and Hotmail.<\/p>\n<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/article\/iot-botnet-infects-100000-routers-to-send-hotmail-outlook-and-yahoo-spam\/\" class=\"lazy\" alt=\"bcmupnphunterspamservers.png\" height=\"auto\" width=\"370\" data-original=\" https:\/\/zdnet1.cbsistatic.com\/hub\/i\/r\/2018\/11\/07\/5e36754c-3222-4a1b-820d-9f264eb9b359\/resize\/370xauto\/e970e9f81177a90a4c737359751d6253\/bcmupnphunterspamservers.png\"\/><\/span><noscript><\/p>\n<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/zdnet1.cbsistatic.com\/hub\/i\/r\/2018\/11\/07\/5e36754c-3222-4a1b-820d-9f264eb9b359\/resize\/370xauto\/e970e9f81177a90a4c737359751d6253\/bcmupnphunterspamservers.png\" class=\"\" alt=\"bcmupnphunterspamservers.png\" height=\"auto\" width=\"370\"\/><\/span><\/p>\n<p><\/noscript> <span class=\"credit\">Image: Qihoo 360 Netlab<\/span><\/p>\n<p>Because all connections were made via TCP port 25 (assigned to the Simple Mail Transfer Protocol [SMTP]), researchers are confident the botnet herders are secretly sending spam waves from behind the botnet&#8217;s cloak of ever-shifting proxies (infected routers).<\/p>\n<p>For what it&#8217;s worth, BCMUPnP_Hunter is not the first IoT botnet to operate as a proxy network (botnets based on the <a href=\"https:\/\/www.akamai.com\/us\/en\/multimedia\/documents\/white-paper\/upnproxy-blackhat-proxies-via-nat-injections-white-paper.pdf\" target=\"_blank\" rel=\"noopener noreferrer\">UPnProxy technique<\/a> are known to do the same) nor as a spam-sending service (see <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/iot-botnet-retooled-to-send-email-spam\/\" target=\"_blank\" rel=\"noopener noreferrer\">ProxyM<\/a> botnet).<\/p>\n<h3>Related stories:<\/h3>\n<p>READ MORE <a href=\"https:\/\/packetstormsecurity.com\/news\/view\/29489\/IoT-Botnet-Infects-100-000-Routers-To-Send-Spam.html\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":18278,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[60],"tags":[4453],"class_list":["post-18277","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-packet-storm","tag-headlinespambotnet"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>IoT Botnet Infects 100,000 Routers To Send Spam 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/iot-botnet-infects-100000-routers-to-send-spam\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"IoT Botnet Infects 100,000 Routers To Send Spam 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/iot-botnet-infects-100000-routers-to-send-spam\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2018-11-07T16:32:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/iot-botnet-infects-100000-routers-to-send-spam.png\" \/>\n\t<meta property=\"og:image:width\" content=\"960\" \/>\n\t<meta property=\"og:image:height\" content=\"425\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/iot-botnet-infects-100000-routers-to-send-spam\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/iot-botnet-infects-100000-routers-to-send-spam\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"IoT Botnet Infects 100,000 Routers To Send Spam\",\"datePublished\":\"2018-11-07T16:32:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/iot-botnet-infects-100000-routers-to-send-spam\\\/\"},\"wordCount\":533,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/iot-botnet-infects-100000-routers-to-send-spam\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/11\\\/iot-botnet-infects-100000-routers-to-send-spam.png\",\"keywords\":[\"headline,spam,botnet\"],\"articleSection\":[\"Packet Storm\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/iot-botnet-infects-100000-routers-to-send-spam\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/iot-botnet-infects-100000-routers-to-send-spam\\\/\",\"name\":\"IoT Botnet Infects 100,000 Routers To Send Spam 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/iot-botnet-infects-100000-routers-to-send-spam\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/iot-botnet-infects-100000-routers-to-send-spam\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/11\\\/iot-botnet-infects-100000-routers-to-send-spam.png\",\"datePublished\":\"2018-11-07T16:32:06+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/iot-botnet-infects-100000-routers-to-send-spam\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/iot-botnet-infects-100000-routers-to-send-spam\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/iot-botnet-infects-100000-routers-to-send-spam\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/11\\\/iot-botnet-infects-100000-routers-to-send-spam.png\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/11\\\/iot-botnet-infects-100000-routers-to-send-spam.png\",\"width\":960,\"height\":425},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/iot-botnet-infects-100000-routers-to-send-spam\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"headline,spam,botnet\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/headlinespambotnet\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"IoT Botnet Infects 100,000 Routers To Send Spam\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"IoT Botnet Infects 100,000 Routers To Send Spam 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/iot-botnet-infects-100000-routers-to-send-spam\/","og_locale":"en_US","og_type":"article","og_title":"IoT Botnet Infects 100,000 Routers To Send Spam 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/iot-botnet-infects-100000-routers-to-send-spam\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2018-11-07T16:32:06+00:00","og_image":[{"width":960,"height":425,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/iot-botnet-infects-100000-routers-to-send-spam.png","type":"image\/png"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/iot-botnet-infects-100000-routers-to-send-spam\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/iot-botnet-infects-100000-routers-to-send-spam\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"IoT Botnet Infects 100,000 Routers To Send Spam","datePublished":"2018-11-07T16:32:06+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/iot-botnet-infects-100000-routers-to-send-spam\/"},"wordCount":533,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/iot-botnet-infects-100000-routers-to-send-spam\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/iot-botnet-infects-100000-routers-to-send-spam.png","keywords":["headline,spam,botnet"],"articleSection":["Packet Storm"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/iot-botnet-infects-100000-routers-to-send-spam\/","url":"https:\/\/www.threatshub.org\/blog\/iot-botnet-infects-100000-routers-to-send-spam\/","name":"IoT Botnet Infects 100,000 Routers To Send Spam 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/iot-botnet-infects-100000-routers-to-send-spam\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/iot-botnet-infects-100000-routers-to-send-spam\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/iot-botnet-infects-100000-routers-to-send-spam.png","datePublished":"2018-11-07T16:32:06+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/iot-botnet-infects-100000-routers-to-send-spam\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/iot-botnet-infects-100000-routers-to-send-spam\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/iot-botnet-infects-100000-routers-to-send-spam\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/iot-botnet-infects-100000-routers-to-send-spam.png","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/iot-botnet-infects-100000-routers-to-send-spam.png","width":960,"height":425},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/iot-botnet-infects-100000-routers-to-send-spam\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"headline,spam,botnet","item":"https:\/\/www.threatshub.org\/blog\/tag\/headlinespambotnet\/"},{"@type":"ListItem","position":3,"name":"IoT Botnet Infects 100,000 Routers To Send Spam"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/18277","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=18277"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/18277\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/18278"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=18277"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=18277"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=18277"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}