AryStinger botnet infected thousands of D-Link routers worldwide
Researchers say AryStinger turns outdated routers into remote executors for scanning and proxying, with nearly half of infections in South Korea.
7 Articles
7 Articles
AryStinger malware is emerging as a new threat to older routers, turning them into a distributed reconnaissance network. In this article, we'll examine the details of the infection and its impact. Swati Khandelwal, June 22, 2026. IoT Security / Vulnerabilities. A new family of malware is emerging that transforms neglected home routers into a distributed reconnaissance and proxy network, rather than the DDoS botnet they typically end up with. QiA…
BleepingComputer
cybernoz.comAryStinger botnet infected thousands of D-Link routers worldwide
A previously undocumented malware botnet named AryStinger has compromised more than 4,000 outdated routers to turn them into proxies for malicious traffic.
Thousands of D-Link routers under control of AryStinger botnet
Researchers have found that the recently discovered AryStinger botnet has quietly hijacked thousands of end‑of‑life D‑Link routers and some network-attached storage (NAS) devices, turning them into a distributed scanning and proxy network that attackers can use to hide their activity and launch attacks against other targets. Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off using coupon code: MWNE…
More than 4,000 old routers, mainly D-Link models, are said to have been compromised by AryStinger. The botnet transforms them into attack relays, capable of scanning the Internet, redirecting traffic and exposing their owners to DNS hijackings.
An undocumented botnet until this week, named AryStinger, has already compromised more than 4,000 obsolete D-Link routers around the world to transform them into malicious traffic proxies and execute distributed recognitions. I confirm it with the data of Qianxin XLab, the Chinese threat intelligence team that has uncovered it: malware turns each infected router into a remote ‘executor’ that scans, tunes and executes commands to the orders of th…
Coverage Details
Bias Distribution
- 67% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
