Reply To: I WAS HACKED! READ THIS. THIS IS MY POST THAT WAS REMOVED FROM REDDIT!

[JBMaclemore.eth]

Oh man, I’m not crazy. It looks like I wasn’t alone in this attack. It also looks like I wasn’t targeted specifically, just caught up in it. I have some infected Access points here, 3 of them. I’m not sure how to go about safely hacking these things to investigate them. If there are any security researchers that want to take a crack at this, I’ll give you one for free. Please reach out.

News:

https://arstechnica.com/information-technology/2023/05/malware-turns-home-routers-into-proxies-for-chinese-state-sponsored-hackers/

Nerd:

https://blog.checkpoint.com/security/check-point-research-reveals-a-malicious-firmware-implant-for-tp-link-routers-linked-to-chinese-apt-group/

Also, according to the article it’s setup to infect other brands, not just TP-Link. I would agree. So far it seems that only the Netgear branded routers in my neighborhood are unaffected. TP-Link, Microtik, Ubiquiti, and the AT&T whitelabel ones appear to be infected.