Hackers have compromised at least 143 devices across 34 countries in a scheme to steal and resell internet bandwidth. The attackers installed Pawns.app, a legitimate application that allows users to earn money by sharing their internet connections, without device owners’ knowledge or consent. By installing the software on multiple systems, the perpetrators accumulated larger financial payouts from the commercial residential proxy network.
Security researchers at GreyNoise identified the campaign and found that attackers exploited vulnerabilities in D-Link ShareCenter NAS devices, Ubiquiti UniFi Video NVR systems, SAP NetWeaver Visual Composer, and Hikvision and Dahua DVR/NVR devices to gain unauthorized access. In some instances, attackers also configured SSH key authentication as a backup entry point. Experts recommend users keep internet-connected devices updated, use strong credentials, implement secure configurations, and restrict network access to reduce compromise risks.
Source: Read the full story at BleepingComputer
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
