Hidden Backdoor Found in Chinese-Made Zbtlink Routers
Researchers found a backdoor implant that gives servers in China full control over the routers.
A cybersecurity firm has discovered a backdoor embedded in the firmware of Chinese-made Zbtlink routers, potentially exposing them to Chinese government control. The implant, found in all 20 models examined by VulnCheck, could allow the company to remotely access other devices connected to the router's network. Jacob Baines, VulnCheck's chief technology officer, explained that when a user connects the router to their network, it attempts to connect to a Chinese server, which can then take full control.
This has led some experts to argue that routers from China should not be trusted, a concern that has resulted in legal actions and bans on certain devices. However, the backdoor discovered in Zbtlink routers is distinct from previous implants, as it is purely an implant used for remote maintenance, according to Shenzhen Zhibotong Electronics, the company that owns Zbtlink.
They claim the implant is only intended for after-sales maintenance and is only included on sample units. VulnCheck's report indicates that all firmware available for download from Zbtlink's website contains the implant.
Written by urgent.news from CNET's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
