Over the past six months, researchers at SecurityScored’s STRIKE team have identified a new WrtHug campaign that's been scanning for compromised devices. They’ve found 50,000 unique IPs globally that appear to have been affected by the malware campaign which targets end-of-life and outdated Asus router models. It then uses six vulnerabilities to hijack them and leaves vulnerable routers open for other hackers to use them for a variety of malicious activities.
Most of the identified and affected models that have been located were found in Taiwan, followed by Southeast Asia, Russia, Central Europe and the United States. The following Asus models are the ones currently being targets in this campaign:
