#VPNFilter

Researchers reveal details on destructive, JS injection and MiTM capabilities (3rd-Stage Module) of the #VPNFilter botnet malware ⚠️Bonus—VPNFilter also hijacks routers and NAS devices from ASUS, D-Link, Huawei, Ubiquiti, QNAP, UPVEL, and ZTE.

FBI has seized control of the massive #VPNFilter botnet that infected over 500,000 routers The seized C&C server domain would help FBI identify infected users and prevent 2nd-stage malware installation.

Destructive and #MiTM Capabilities of #VPNFilter Malware Revealed #CyberSecurity #infosec #AI #Malware #Fintech #Blockchain #Chatbots #Bigdata #datascience #Privacy #Privacymatters #hack #hacking #databreach #crypto

Great work by @kpoulsen on this story about #FBI seizing control of the callback domain for #VPNFilter - this means that if you're a victim, the FBI knows it now. When or if they'll be notifying you is anyone's guess, but they won't be cleaning it for you.

This free tool from will tell you if your router is affected by #VPNFilter

“If your router is by default vulnerable and cannot be updated, throw it away.” Now here’s some security advice I can stand behind! #VPNFilter

Symantec has a free online tool to help check if your router is impacted by #VPNFilter. Try out our VPNFilter Check Tool now:

Our VPNFilter Check Tool will let you know if your router is infected with #VPNFilter

YARA + Sigma + Suricata rules for #VPNFilter malware.

VPNFilter 🏹 YARA rules Sigma rule extended to include the specific User-Agent Suricata rule

One mal methodology that I love is using IP checking services. There are many, but #VPNFilter uses ipify. Why? I think the developers preferred JSON... Here is a recent-ish VPNFilter hit I saw at a large uni. #dailypcap #adversarymethodology #ipcheck Ref:

Like a global neighborhood watch – read how the biggest tech and #cybersecurity companies are banding together to stop hacking campaigns before they happen. #VPNFilter #security

This just in: Talos releases the latest intel on #VPNFilter. Additional devices and vendors targeted, and additional modules discovered in this ongoing investigation. Get the full details in their blog

#VPNFilter malware is back and it seems like rebooting routers is useless - Here's the list of newly identified router models.

Since the #VPNFilter malware several years ago, our vulnerability research team has looked into several popular wireless routers used in homes and small businesses. Now, we have a rundown of all the vulnerabilities we discovered as part of this research

#ParalyseTheInternet — Researchers unearth a huge #botnet army of over 500,000 hacked routers and Internet-connected storage devices from Linksys, MikroTik, NETGEAR, and TP-Link. #VPNFilter

#ResearchSaturday: This week, the team from @Cisco @TalosSecurity join us to discuss their research on #malware they call #VPNFilter that could #brick devices worldwide. Hear from Craig Williams on his team's work. #cybersecurity #infosec @security_craig

The threat from #VPNFilter isn't over yet. @TalosSecurity discovered additional devices may be at risk. Learn more:

We found a couple of vulnerabilities in D-Link routers and reported them to the vendor and ISPs using them. The sorry state of router security nowadays make things like #VPNFilter possible

Is your router impacted by #VPNFilter? Use Symantec's free VPNFilter Check Tool to find out:

If you want a break from #VPNFilter analysis, check out this fancy #DailyScriptlet: "robots.txt" The uploader has been busy with several revisions. Screenshots: 1⃣ Scriptlet evasion and customization 2⃣ My quick tips on static script analysis 3⃣ Static VT engine 0/59 reached