Small and home office router malware discovered by researchers

Image via Unsplash

A new malware that targets small and home office (SOHO) routers has been discovered by Lumen Technologies. The malware has been named "AVrecon". Researchers determined the malware has infiltrated more than 70,000 machines and gained persistent hold in more than 40,000 of them in 20 countries.

SOHO routers pose a serious threat because these devices are not always automatically patched and updated and aren't regularly monitored, which significantly decreases the ability to detect malicious activity. With the prevalence of remote workers, corporate network defenders should take the following precautions:

Continue to look for attacks on weak credentials and suspicious login attempts, even when they originate from residential IP addresses.
Be aware that threat actors can spawn a remote shell and deploy subsequent modules.
Protect cloud assets from communicating with bots that are attempting to perform password spraying attacks and begin blocking Indicators of Compromise (IoCs) with Web Application Firewalls.
Consumers who use SOHO routers should regularly reboot their devices and install security updates and patches where available.

ON DEMAND: Business-impacting events such as severe weather, man-made disasters, and supply chain disruption are increasing in frequency and making impacts around the globe.

In today's rapidly evolving security landscape, organizations face an ever-growing array of disruptive events, security threats and risks. Traditional reactive approaches to security intelligence often leave businesses vulnerable and ill-prepared to anticipate and mitigate emerging threats that could impact the safety of their people, facilities or operations.