tangent
IPCT Contributor
- Joined
- May 12, 2016
- Messages
- 4,421
- Reaction score
- 3,655
Disabling UPnP has been long standing security advice here, but this new attack emphasizes just how dangerous and broken UPnP is. This vulnerability is exploited from the WAN side of your network.
Check out this detailed presentation from akamai which includes a list of nearly 400 router models that are vulnerable:
https://www.akamai.com/us/en/multimedia/documents/white-paper/upnproxy-blackhat-proxies-via-nat-injections-white-paper.pdf
Over 65,000 Home Routers Are Proxying Bad Traffic for Botnets, APTs
Is the sky falling? Not yet, but Akamai detected over 4.8 million vulnerable devices!
DISABLE UPnP AND UPDATE YOUR ROUTER REGULARLY. DO IT NOW.
Check out this detailed presentation from akamai which includes a list of nearly 400 router models that are vulnerable:
https://www.akamai.com/us/en/multimedia/documents/white-paper/upnproxy-blackhat-proxies-via-nat-injections-white-paper.pdf
Over 65,000 Home Routers Are Proxying Bad Traffic for Botnets, APTs
Is the sky falling? Not yet, but Akamai detected over 4.8 million vulnerable devices!
DISABLE UPnP AND UPDATE YOUR ROUTER REGULARLY. DO IT NOW.