Hackers Hijack D-Link, Ubiquiti Devices To Resell Your Stolen Bandwidth
An anonymous reader quotes a report from BleepingComputer: A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. The operator installed Pawns.app, a legitimate bandwidth-sharing application that lets users earn money by sharing their internet connections, on devices without the owners' consent.…
A proxyjacking campaign has affected devices in 34 countries, exploiting internet connections for financial gain. The malicious software, Pawns.app, was installed without victims' knowledge, allowing unauthorized traffic to flow through their networks. GreyNoise, a threat intelligence company, uncovered the scheme while investigating unusual activity at an undisclosed organization and identified over 143 compromised devices globally.
The attacker took advantage of known vulnerabilities in D-Link ShareCenter NAS, Ubiquiti UniFi Video NVR, SAP NetWeaver Visual Composer, and also targeted Hikvision and Dahua DVR/NVR devices, although the precise exploits remain unclear. In certain instances, attackers established SSH key authentication to maintain secondary access to the hijacked systems.
Written by urgent.news from Slashdot's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
