Threat intelligence firm GreyNoise on Wednesday lifted the lid on a stealth malware campaign that has quietly converted thousands of internet-facing ASUS home and small-office routers into backdoor nodes since at least mid-March.
In an advisory coordinated with government and industry partners, the Washington-based GreyNoise said unidentified attackers are chaining a mix of brute-force logins, two older authentication bypass flaws and a 2023 command-injection bug to seize full control of the devices, then using legitimate configuration settings to lock in that access.
https://www.securityweek.com/greynoise- ... erability/