SOHOwned: 300K Home Routers Hacked

Team Cymru and other security researchers reported a large-scale compromise of SOHO/home routers (including D-Link, TP-Link, Tenda, Micronet) where attackers leveraged known firmware flaws (auth bypass, CSRF) to change DNS settings and redirect users through attacker-controlled DNS servers. Up to ~300,000 devices were identified—primarily in Vietnam, India and Italy—and while Cymru did not observe definitive malicious traffic, delays when accessing banking and software sites and separate reports of banking fraud suggest possible credential harvesting and significant risk to residential and small-office networks.