China-Nexus Hackers Exploit Ruckus Routers to Build Operational Relay Box Networks

UAT-7810, a China-nexus hacking group, is expanding a global network of hijacked internet devices by exploiting security flaws in Ruckus wireless routers and rolling out new custom malware. This activity feeds into what researchers call an Operational Relay Box network, a chain of compromised devices used to hide the true origin of cyberattacks. The tactic lets attackers route their traffic through ordinary home and business routers, making malicious activity blend in with normal internet traffic. The group’s efforts are not new. Security researchers first flagged this ORB network, known as LapDogs, back in 2025, but the infrastructure has kept growing since then. UAT-7810 appears to specialize in building and...

Read the full article at the source.