Routers running Tomato are under attack targeting default password for remote administration

[fenderman]

Internet routers running Tomato are under attack by notorious crime gang

The Muhstik botnet has targeted other IoT devices. Now it’s attacking Tomato routers.

arstechnica.com

Muhstik Botnet Attacks Tomato Routers to Harvest New IoT Devices

Unit 42 discovered a new variant of the Muhstik botnet that now adds a scanner to attack Tomato routers for the first time by web authentication brute-forcing.

unit42.paloaltonetworks.com

 

[Ssayer]

and the amazing thing is just how many people that will have left the pw at default...

 

[bp2008]

Yup...