ViciousTrap: How a Rogue Botnet is Turning Your Router into a Honeypot Playground
ViciousTrap, a mischievous threat actor, has turned over 5,300 network devices into a honeypot playground by exploiting a Cisco vulnerability. With most infections in Macau, it’s like a tech-savvy prankster’s dream vacation spot! Who knew routers could be the life of the party?
Key Points:
- ViciousTrap has compromised 5,300 network edge devices across 84 countries.
- They’re exploiting a Cisco routers flaw (CVE-2023-20118) to create a honeypot network.
- The infection involves a shell script, NetGhost, redirecting traffic to attacker-controlled infrastructure.
- Exploitation originates from a single IP in Malaysia, with activities linked to Chinese-speaking actors.
- The ultimate goal of ViciousTrap is still a mystery, but it’s suspected to be a honeypot-style network.
Already a member? Log in here