Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
-
A newly detailed proxyjacking campaign has compromised D-Link and Ubiquiti devices across 34 countries, quietly monetizing victims' internet connections by routing traffic through a commercial residential proxy network. Rather than stealing data or demanding a ransom, the operators sell access to the hijacked bandwidth, turning infected routers and similar hardware into an illicit revenue stream.
The campaign abuses known weaknesses in these devices to gain a foothold, after which the equipment is enrolled into the proxy network without the owners' knowledge. Because the activity blends into normal outbound traffic, affected organizations may not notice anything unusual until they investigate unexplained bandwidth consumption or suspicious connections.
Security teams should consider the following precautions:
- Review D-Link and Ubiquiti devices for unauthorized configuration changes or unexpected outbound traffic.
- Apply the latest firmware updates and replace hardware that no longer receives vendor support.
- Disable remote management and default credentials where possible, and restrict administrative access to trusted networks.
- Monitor network egress for connections to residential proxy infrastructure and investigate anomalies promptly.
Source: BleepingComputer
Has your organization audited its edge devices for signs of proxyjacking, or do you rely on vendor firmware updates alone?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login