{"id":7001,"date":"2018-07-21T10:45:27","date_gmt":"2018-07-21T10:45:27","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\/"},"modified":"2018-07-21T10:45:27","modified_gmt":"2018-07-21T10:45:27","slug":"labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\/","title":{"rendered":"LabCorp ransomed, 18k routers rooted, a new EXIF menace, and more"},"content":{"rendered":"
<\/div>\n

Roundup<\/strong> This was the week of blunders by Venmo<\/a>, million-dollar bank heists<\/a>, and beefier bug bounties<\/a>.<\/p>\n

Here’s a few more bits of news.<\/p>\n

Singapore sting<\/span><\/h3>\n

Any large-scale data breach is bad news, but one that results in the loss of the health information of a quarter of the population is downright disastrous.<\/p>\n

Such was the case in Singapore<\/a>, where an estimated 1.5 million people (about 25 per cent of the population) had their records lifted from the health and information ministries’ database.<\/p>\n

Any Singaporeans worried this will get swept under the rug can rest easy(ish): Prime Minister Lee Hsien Loong was among those whose data got lifted in the heist. In fact, the nation’s Cyber Security Agency believes that it was Loong who was the original target of the attack.<\/p>\n

Authorities have yet to find any of the pilfered information online, so it’s not clear whether this was the work of a nation-state sponsored operation or just an effort by cybercriminals to harvest valuable records.<\/p>\n

Dear Uncle Sam, please come to your census<\/span><\/h3>\n

The US Census is coming up in just two years, and given the importance of the data for things like congressional seats and public assistance, getting the population data right is critical.<\/p>\n

That’s why a group of former government security experts are pressing the Census Bureau to assess and report just how it plans to secure the census and prevent outside groups from manipulating the data. They’ve issued an open letter<\/a> [PDF] requesting a security report.<\/p>\n

“Our country\u2019s elected representatives and, indeed, the American people deserve to understand the technical protocols and systems being utilized by the Census Bureau to ensure that the electronic collection and storage of information about millions of Americans will be handled as securely as possible,” the letter reads.<\/p>\n

“This is especially important in an age in which new types and sources of cybersecurity threats seem to emerge almost weekly.”<\/p>\n

The group claims they’ve already tried to get the data from the Census Bureau, but have thus far been ignored. Hence the decision to issue an open letter.<\/p>\n

EXIF-iltration<\/span><\/h3>\n

Malware writers are now sullying the good name of Google (stop laughing) to infect users via image files.<\/p>\n

Researchers with Sucuri<\/a> explained how hackers have been using sites like Google+ or Blogger to upload image files that contain EXIF data within the “usercomment” data section. That EXIF code is where the magic happens, executing the script that actually attempts to infect the user with malware.<\/p>\n

“In previous cases, hackers used EXIF data within images to hide malicious code inside files that are rarely scanned for malware,” Sucuri explains.<\/p>\n

“In this specific case, we see that the main goal is to host malicious scripts on a reliable and trusted server so that they are always available for downloading from any compromised sites.”<\/p>\n

DNS rebinding reloads for enterprise attacks<\/span><\/h3>\n

Last month we were alerted to the return of DNS rebinding attacks on consumer devices<\/a>. Now, we’re hearing that enterprise hardware could also be vulnerable to a flaw that has been known about for more than a decade.<\/p>\n

Researchers with security outfit Armis say that as many as half a billion pieces of kit<\/a> in use by just about every enterprise could also be remotely hijacked and added to botnets via the same DNS rebinding techniques.<\/p>\n

Armis argues that things like printers and VoIP handsets are just as vulnerable as your Roku or home router when it comes to vulnerabilities, and if admins don’t keep a close eye on all their hardware, those unattended items could become cogs in a massive new botnet.<\/p>\n

“Armis has found that the issue impacts hundreds of millions of IoT and other unmanaged devices used inside almost every enterprise,” notes Armis VP of research Ben Seri.<\/p>\n

“From smart TVs to printers, digital assistants to IP phones and more, the exposure leaves organizations vulnerable to compromise, data exfiltration, and to devices getting hijacked for another Mirai-like attack.”<\/p>\n

18,000 routers pwned in a day<\/span><\/h3>\n

We knew it was easier than ever to build a botnet, but who knew it was this easy?<\/p>\n

Researcher Ankit Anubhav discovered and tracked down the creator of an 18,000 strong botnet made up entirely of vulnerable Huawei network routers. As it turns out, the person behind the botnet was able to put it together in under 24 hours and used just one exploit, for a flaw that has been known for more than half a year.<\/p>\n

\n

The motives are not clear as the attacker only told he is doing this “to make the biggest baddest botnet in town” . Probably DDoS.
CBE-2017-17215 related article https:\/\/t.co\/5xiWKFynTY<\/a><\/p>\n

Its painfully hilarious how attackers can construct big bot armies with known vulns. (3\/3)<\/p>\n

\u2014 Ankit Anubhav (@ankit_anubhav) July 18, 2018<\/a><\/p><\/blockquote>\n

Let this be yet another reminder: make sure you regularly patch everything on your network regularly. Firmware updates for routers or printers can be an easy thing to forget, but if they get compromised things could get ugly very quickly.<\/p>\n

LabCorp says ‘it was ransomware what knocked over our network’<\/span><\/h3>\n

Earlier this week we shared the story<\/a> of how a mystery attack had briefly taken down much of LabCorp’s medical testing network.<\/p>\n

At the time, there was no official word on what had caused the diagnostics service to go dark, and there were fears that the company might have lost some of the millions of medical records it keeps from its lab test facilities around the country.<\/p>\n

As it turns out, the culprit was in fact a ransomware infection. El Reg<\/em> received an update from LabCorp that contained the following clarification:<\/p>\n

“The activity was subsequently determined to be a new variant of ransomware,” the statement reads.<\/p>\n

“LabCorp promptly took certain systems offline as part of its comprehensive response to contain and remove the ransomware from its system.”<\/p>\n

The good news is no data was taken, and your medical records are safe. LabCorp says it is working with authorities to investigate the incident.<\/p>\n

Get VLC 3.0.3 …Like right now<\/span><\/h3>\n

You will want to make sure your copy of VLC is up to date, after a high-severity security flaw was adapted for a popular metasploit exploit tool.<\/p>\n

Researcher Davy Douhine broke the news on Twitter:<\/p>\n

\n

Update VLC ! Incoming #metasploit<\/a> exploit targeting a UAF in VideoLAN VLC media player <= 2.2.8 ! CVE-2018-11529 discovered and exploited by Eugene Ng and module coded by Winston Ho. I guess sharing this on Torrent will pop a few shells \ud83d\ude09 https:\/\/t.co\/CiKuiAtK0q<\/a> pic.twitter.com\/p61iqjFdJF<\/a><\/p>\n

\u2014 Davy Douhine (@ddouhine) July 19, 2018<\/a><\/p><\/blockquote>\n

CVE-2018-11529 is a bug that can be exploited to allow remote code execution. It was discovered by Eugene Ng.<\/p>\n

While a working Metasploit module ups the danger, there’s a simple and very practical solution for this one: update your copy of VLC to version 3.0.3 and you’ll have the bug all patched up.<\/p>\n

File under: Good luck with that<\/span><\/h3>\n

The family of Silk Road boss Ross Ulbricht is still at it. The darknet drug market supremo was jailed for life without parole<\/a> back in 2015, and while it’s highly unlikely that the American judiciary and prosecution would backtrack on its decision, Ross’ mother, isn’t giving up the fight to have her son released from lockup in this lifetime.<\/p>\n

A Change.org petition<\/a> seeks a clemency grant for Ulbricht.<\/p>\n

“Ross is condemned to die in prison, not for dealing drugs himself but for a website where others did. This is far harsher than the punishment for many murderers, pedophiles, rapists and other violent people,” writes mother Ulbricht.<\/p>\n

“Ross\u2019s investigation, trial and sentencing were rife with abuse. This includes corrupt federal investigators (now in prison) who were hidden from the jury, as well as prosecutorial misconduct, constitutional violations and reliance on unproven allegations at sentencing. Ross did not get a fair trial and his sentence was draconian.”<\/p>\n

Right now, the petition has more than 18,000 signatures. Unfortunately, the petitions have no legal sway, and it’s unlikely US Attorney General Jeff Sessions nor President Donald Trump will be moved to reverse their “tough on crime” stance for Ulbricht. \u00ae<\/p>\n

Sponsored:<\/span> Prepare for Now \u2013 Monitor everything in your network<\/a><\/p>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Plus a new worry for enterprises over DNS flaws Roundup\u00a0 This was the week of blunders by Venmo, million-dollar bank heists, and beefier bug bounties.\u2026 READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":7002,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-7001","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"\nLabCorp ransomed, 18k routers rooted, a new EXIF menace, and more 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"LabCorp ransomed, 18k routers rooted, a new EXIF menace, and more 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2018-07-21T10:45:27+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/07\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"794\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"LabCorp ransomed, 18k routers rooted, a new EXIF menace, and more\",\"datePublished\":\"2018-07-21T10:45:27+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\\\/\"},\"wordCount\":1370,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/07\\\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\\\/\",\"name\":\"LabCorp ransomed, 18k routers rooted, a new EXIF menace, and more 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/07\\\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more.jpg\",\"datePublished\":\"2018-07-21T10:45:27+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/07\\\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/07\\\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more.jpg\",\"width\":1200,\"height\":794},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"LabCorp ransomed, 18k routers rooted, a new EXIF menace, and more\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"LabCorp ransomed, 18k routers rooted, a new EXIF menace, and more 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\/","og_locale":"en_US","og_type":"article","og_title":"LabCorp ransomed, 18k routers rooted, a new EXIF menace, and more 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2018-07-21T10:45:27+00:00","og_image":[{"width":1200,"height":794,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/07\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"LabCorp ransomed, 18k routers rooted, a new EXIF menace, and more","datePublished":"2018-07-21T10:45:27+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\/"},"wordCount":1370,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/07\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\/","url":"https:\/\/www.threatshub.org\/blog\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\/","name":"LabCorp ransomed, 18k routers rooted, a new EXIF menace, and more 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/07\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more.jpg","datePublished":"2018-07-21T10:45:27+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/07\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/07\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more.jpg","width":1200,"height":794},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/labcorp-ransomed-18k-routers-rooted-a-new-exif-menace-and-more\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"LabCorp ransomed, 18k routers rooted, a new EXIF menace, and more"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/7001","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=7001"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/7001\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/7002"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=7001"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=7001"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=7001"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}