Shared from twixb · arstechnica.com

14,000 routers are infected by malware that's highly resistant to takedowns

arstechnica.com·Mar 11, 2026

Researchers have identified a botnet called KadNap, consisting of 14,000 compromised routers, mostly Asus models, that form a proxy network for cybercrime by exploiting unpatched vulnerabilities, utilizing a Kademlia-based peer-to-peer design to resist detection and takedowns.

For a cybersecurity professional, the critical insight is the emergence of the takedown-resistant KadNap botnet, which exploits unpatched vulnerabilities in Asus routers using sophisticated peer-to-peer network design. This highlights the urgent need for organizations to prioritize patch management and vulnerability assessments, particularly for network devices, to prevent their infrastructure from being conscripted into such resilient botnets.

Powered by twixb

Want more content like this?

twixb tracks your favorite blogs and social media, filters by keywords, and delivers personalized key learnings — straight to your inbox.