{"id":45775,"date":"2022-03-18T19:02:40","date_gmt":"2022-03-18T19:02:40","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/cyclops-blink-malware-sets-up-shop-in-asus-routers\/"},"modified":"2022-03-18T19:02:40","modified_gmt":"2022-03-18T19:02:40","slug":"cyclops-blink-malware-sets-up-shop-in-asus-routers","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/cyclops-blink-malware-sets-up-shop-in-asus-routers\/","title":{"rendered":"Cyclops Blink malware sets up shop in ASUS routers"},"content":{"rendered":"

Cyclops Blink malware has infected ASUS routers in what Trend Micro threat researchers say looks like an attempt to turn infected devices into command-and-control servers for future attacks.<\/p>\n

ASUS says it’s working on a remediation<\/a> for Cyclops Blink and will post software updates as they become available. The hardware maker also recommends users either install the latest firmware on their devices or disable remote access from the WAN and reset the routers to default settings to avoid being compromised.<\/p>\n

The new modular botnet has ties to Kremlin-backed Sandworm, the criminal group behind the nasty VPNFilter malware<\/a> in 2018 that targeted routers and storage devices, as well as several high-profile attacks including the 2015 and 2016 attacks on Ukraine’s electrical grid, NotPetya in 2017 and the French presidential campaign email leak that same year.  <\/p>\n