13,000 MikroTik Routers Hijacked by Botnet for Malspam and Cyberattacks
https://thehackernews.com/2025/01/13000-mikrotik-routers-hijacked-by.htmlOpen linkView original on infosec.pubSyndicated from the fediverse. Read and engage on the original instance.
View original on infosec.pubhttps://thehackernews.com/2025/01/13000-mikrotik-routers-hijacked-by.htmlOpen linkView original on infosec.pub
1 reply
Looks to stem from default creds and SPF+all, both of which are amateur hour. In their defense, devices should not allow keeping default creds, and SPF should have never implemented the +all tag. Still, though. It's 2025, not 2005. They should have known.