“The purpose of Trickbot using MikroTik devices is to create a line of communication between the Trickbot-affected device and the C2 server that standard defense systems in the network are not ...

How MikroTik Routers Became a Cybercriminal Target. Author: Elizabeth Montalbano. December 9, 2021 10:56 am. minute read Share this article: ...

Researchers from 360 Netlab say that out of over five million devices with an open TCP/8291 port online, 1.2 million are MikroTik routers -- of which, 370,000 devices remain unpatched against CVE ...

A full 7,500+ MikroTik routers are forwarding their owners’ traffic to eavesdropping cybercriminals – while 239,000 more have had their Socks4 proxy enabled, maliciously and surreptitiously.

As many as 300,000 routers made by Latvia-based MikroTik are vulnerable to remote attacks that can surreptitiously corral the devices into botnets that steal sensitive user data and participate in ...

Anubhav detected over 7,300 defaced routers, which is about 1.3% of all MikroTik devices available online. The attacks caused some initial panic because nobody knew how they were taking place.

Via a honeypot since July, researchers from the China-based Netlab 360 noticed malware exploiting MikroTik routers. Attackers are exploiting the MikroTik CVE-2018-14847 flaw that was patched in April.

Researchers have discovered over 415,000 routers across the globe have been infected with malware designed to steal their computing power and secretly mine cryptocurrency. The attack, which is ...

However, the vulnerability which allowed the firm's routers to become cryptocurrency mining slaves was no zero-day; instead, it is CVE-2018-14847, a known security bug impacting Winbox for ...

A history of MikroTik routers abuse. Several serious vulnerabilities and exploits have been identified in MikroTik’s RouterOS firmware over the past few years that allow devices to be ...

Latvian network equipment manufacturer MikroTik has shared details on how customers can secure and clean routers compromised by the massive Mēris DDoS botnet over the summer.