Thousands of hacked TP-Link routers used in years-long account takeover attacks

Ramadhir Singh

Ramadhir Singh

Wasseypur
Guide
Hackers working on behalf of the Chinese government are using a botnet of thousands of routers, cameras, and other Internet-connected devices to perform highly evasive password spray attacks against users of Microsoft’s Azure cloud service, the company warned Thursday
Click to expand...
arstechnica.com

Thousands of hacked TP-Link routers used in years-long account takeover attacks

The botnet is being skillfully used to launch “highly evasive” password-spraying attacks.
arstechnica.com arstechnica.com

What they are gaining which such activity ?
 
Precious realtime information of the area where such systems are deployed. And a system in place for launching co-ordinated attacks if needed.
 
bigb123 said:
Precious realtime information of the area where such systems are deployed. And a system in place for launching co-ordinated attacks if needed.
Click to expand...
Next question is what security update is tp-link offering to prevent such vulnerabilities to the tplink owner?

Are these recent routers or older unsupported devices.
 
Last edited:
blr_p said:
Next question is what security update is tp-link offering to prevent such vulnerabilities to the tplink owner?

Are these recent routers or older unsupported devices.
Click to expand...
Not unless some competent authority orders them to do so...they only care about profits...
 
TP-Link...and Updates. This itself is a very dicey topic.
Secondly, Tp-Link routers are generally bought by less tech-savvy people.
Third, updating a router is usually unknown knowledge for many. Ask an average joe if they have ever updated their router's firmware, and they will give you a puzzled look.
All this works in favor of hackers.
As a simple rule of thumb, change default password, use long passwords, and stop unnecessary services from being accessible from WAN or internet side. Only allow local access to select services and disable those services that aren't needed.
 
bigb123 said:
Number of tech illiterate people using tp link routers is huge...hence the negative pr wont impact them much....ppl be like net chalu hai na, haat mat lagao...
Click to expand...
ditto.
and most of these router are suggested or installed by their cable wala/ISP. TPlink still dominates the bottom tier of router with no other competitor.
 
I believe that TPlink has China snooping, Netgear, Belkin has US/UK/EU snooping in with backdoors. so oldwine and old bottle. We should focus on monitoring our data traffic when we can.
blr_p said:
Next question is what security update is tp-link offering to prevent such vulnerabilities to the tplink owner?

Are these recent routers or older unsupported devices.
Click to expand...
All of them is what i get from the news and forums
 
Every Chinese brand router /gpon etc starts communicating to china out of the box even their phones .What india needs is someone you can atleast design a phone & operating system (i have high hopes on those custom rom builders maintainers) and start giving contract order to foxcon india .Hell i want would want to get into electronics manufacturing but sadly i don't belong to it .This is the most correct time to get into it
 
burntwingzZz said:
Every Chinese brand router /gpon etc starts communicating to china out of the box even their phones
Click to expand...
yes, but it was like this from day one with all chinese devices. remember how Huawei putting spy techniques in all their 5g equipment.
And there was also a free tv, which one has to keep running 24x7 with the camera and mic on. which will display ads. -- dont know what happen to that idea.
 
Back
Top