Cybersecurity Agencies Warn Ubiquiti EdgeRouter Users of APT28's MooBot Threat

A joint advisory warns that APT28 (MooBot) used compromised Ubiquiti EdgeRouters worldwide to deploy trojans and backdoors (including MASEPIE), harvest credentials (NTLMv2 digests), proxy traffic, and host phishing infrastructure; the group has exploited vulnerabilities such as CVE-2023-23397 and targeted multiple sectors and countries, with authorities recommending factory resets, firmware updates, credential changes, and firewall protections.