Attackers turn at least 143 devices into paid proxy nodes
Image: Primary GreyNoise identified at least 143 compromised devices across 34 countries in a campaign that monetizes victims' internet connections, BleepingComputer reports. The operator installed Pawns.app, a legitimate bandwidth-sharing application, without device owners' consent.
Attackers exploited vulnerabilities in D-Link ShareCenter NAS devices, Ubiquiti UniFi Video NVR systems and SAP NetWeaver Visual Composer. GreyNoise also observed targeting of Hikvision and Dahua recorders and, in some cases, SSH keys configured for backup access. Proxy traffic can expose device owners to IP address blocks or allegations of involvement in illegal activity.
Sources
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.
Back to Newswire
