Spammer scum hack 100,000 home routers via UPnP vulns to craft email-flinging botnet [telecom]

open original image

Look out for traffic to and from these IP addresses and ports

Once again, a hundred thousand or more home routers have been press-ganged into a spam-spewing botnet, this time via Universal Plug and Play (UPnP).

According to brainiacs from 360 Netlab, the malware exploits vulnerabilities in a Broadcom UPnP implementation to infect vulnerable gateways, and that means a load of router manufacturers are affected because their kit uses that technology.