A new botnet made up of roughly 100,000 home routers has silently grown over the past two months. According to current evidence, the botnet's operators appear to use the infected routers to connect to webmail services and are most likely sending out massive email spam campaigns.

First spotted this September by the Netlab team at Qihoo 360, the botnet has been exploiting a well-known five-year-old vulnerability to spread.

The vulnerability was discovered in 2013 by security researchers from DefenseCode and resides in the Broadcom UPnP SDK, a piece of software that was embedded in thousands of router models from multiple vendors.

The vulnerability allows an attacker to execute malicious code on a remote vulnerable router without needing to authenticate, and it's the worse kind of vulnerability that exists in the world of Internet-connected devices...

Read more: IoT botnet infects 100,000 routers to send Hotmail, Outlook, and Yahoo spam | ZDNet

See also: BCMPUPnP_Hunter: A 100k Botnet Turns Home Routers to Email Spammers

Posted By: Brink
07 Nov 2018