Third World Problem: Bot Herders Target Home Routers In Developing Nations

Incapsula researchers uncovered a global DDoS botnet built from insecure SOHO routers (many Ubiquiti devices) infected with the MrBlack malware; over 40,000 IPs across 109 countries (85% from Brazil and Thailand) were observed, with devices using default vendor credentials and reachable via HTTP/SSH, controlled by approximately 60 C2 servers and used in sustained attacks against customer domains.