heMoon worm infects Linksys routers by exploiting an authentication bypass vulnerability in various models from the vendor’s E-Series product line.
“At this point, we are aware of a worm that is spreading among various models of Linksys routers,” said Johannes Ullrich, the chief technology officer at SANS ISC. “We do not have a definite list of routers that are vulnerable, but the following routers may be vulnerable depending on firmware
https://www.network-security-magazine.c ... s-routers/