Zbtlink Chinese Router Sold Worldwide Contains a Hidden Backdoor Affecting 20+ Models

Zbtlink routers sold in global markets have been found carrying a hidden remote-control implant that starts with the device. The discovery affects equipment used in homes, offices, temporary sites and vehicles, turning a trusted network gateway into a potential entry point. The affected devices may be present anywhere small, low-cost network hardware is deployed today. The implant, called ENDLESSDOORS, does not rely on a victim clicking a link or an attacker breaking into a router. It calls out from the router to external infrastructure and waits for instructions, meaning ordinary firewall rules may not stop the connection. Analysts at VulnCheck identified the code inside firmware images for more than 20 Zbtlink models...

Read the full article at the source.