Malicious Cisco router backdoor found on 79 more devices, 25 in the US

jmke · 17th September 2015, 13:56

The highly clandestine attacks hitting Cisco Systems routers are much more active than previously reported. Infections have hit at least 79 devices in 19 countries, including an ISP in the US that's hosting 25 boxes running the malicious backdoor.

That discovery comes from a team of computer scientists who probed the entire IPv4 address space for infected devices. As Ars reported Tuesday, the so-called SYNful Knock router implant is activated after receiving an unusual series of non-compliant network packets followed by a hardcoded password. By sending only the out-of-sequence TCP packets but not the password to every Internet address and then monitoring the response, the researchers were able to detect which ones were infected by the backdoor.

http://arstechnica.com/security/2015...-25-in-the-us/

17th September 2015, 13:56	#1
jmke Madshrimp Join Date: May 2002 Location: 7090/Belgium Posts: 79,021	Malicious Cisco router backdoor found on 79 more devices, 25 in the US The highly clandestine attacks hitting Cisco Systems routers are much more active than previously reported. Infections have hit at least 79 devices in 19 countries, including an ISP in the US that's hosting 25 boxes running the malicious backdoor. That discovery comes from a team of computer scientists who probed the entire IPv4 address space for infected devices. As Ars reported Tuesday, the so-called SYNful Knock router implant is activated after receiving an unusual series of non-compliant network packets followed by a hardcoded password. By sending only the out-of-sequence TCP packets but not the password to every Internet address and then monitoring the response, the researchers were able to detect which ones were infected by the backdoor. http://arstechnica.com/security/2015...-25-in-the-us/ __________________

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Cisco is optimizing networks for Apple devices	Stefan Mileschin	WebNews	0	1st September 2015 11:37
This router can power your devices wirelessly from 20 feet away	Stefan Mileschin	WebNews	0	6th January 2015 09:30
Bitcoin Miner Found in Malicious Google Play Apps	Stefan Mileschin	WebNews	0	28th April 2014 08:59
Router makers hide backdoor	Stefan Mileschin	WebNews	0	23rd April 2014 07:47
RSA didn't let the NSA in through the backdoor	Stefan Mileschin	WebNews	0	24th December 2013 14:47
How to Ensure Your Router, Cameras, Printers, and Other Devices Aren’t Accessible on	Stefan Mileschin	WebNews	0	5th August 2013 14:45
Cisco Linksys E4200 Maximum Performance Dual-Band N Router Review @ NikKTech	Stefan Mileschin	WebNews	0	5th September 2012 06:50
New Mac OS X backdoor discovered	Stefan Mileschin	WebNews	0	5th July 2012 07:08
Cisco Introduces a 322 Tbit/sec. Router	jmke	WebNews	1	10th March 2010 10:36
Cisco on verge of anti-spam router breakthrough?	jmke	WebNews	0	25th July 2004 23:10