A new malware campaign has been observed targeting edge devices from Cisco, ASUS, QNAP, and Synology to rope them into a botnet named PolarEdge since at least the end of 2023. French cybersecurity com...
Read Full Article »PolarEdge Botnet Exploits Cisco and Other Flaws to Hijack ASUS, QNAP, and Synology Devices
Discussion Points
- This content provides valuable insights about business.
- The information provides valuable insights for those interested in business.
- Understanding business requires attention to the details presented in this content.
Summary
A new malware campaign has been identified targeting edge devices from various manufacturers, including Cisco, ASUS, QNAP, and Synology. The goal is to infect these devices with a botnet called PolarEdge.
The attackers have been leveraging a critical security flaw (CVE-2023-20118) in Cisco Small Business RV016 and RV042 routers, exploiting it to deploy a backdoor. This vulnerability has a CVSS score of 6.5, indicating a high level of severity.
Consequences and Response: The use of such vulnerabilities highlights the importance of prompt patching and regular security updates. Device manufacturers and users must work together to ensure these flaws are addressed and prevent further exploitation.