Threat group reroutes software updates through hacked network gear

Sometimes an attack hides in the most ordinary corner of a network. ESET researchers say a China aligned threat group known as PlushDaemon has been quietly using hacked routers to steer software updates toward its own servers. The discovery shows how a small foothold in a single device can become a path into global targets. A new implant built to redirect everything ESET found that PlushDaemon uses an implant called EdgeStepper. It sits on a … More →

The post Threat group reroutes software updates through hacked network gear appeared first on Help Net Security.