Compromised Website Used In Attack On SoHo Routers
ID: 19d755c9-cb71-5072-9c58-00db79271d82
STIX ID: report--19d755c9-cb71-5072-9c58-00db79271d82
Feed Name: Security Ledger
Threat Score
The report describes a campaign in which attackers compromised a Brazilian news website to deliver iframe-based payloads that attempt to change DNS settings on home/SoHo routers by brute-forcing default credentials and exploiting known firmware flaws, citing Sucuri and related research on widespread router compromises.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.