Moon Worm Infects Thousands Of Linksys Routers Spreading From One To Another Techworm
Due to this worm an infected router’s HTTP server is opened only for a short period of time and for each target a new server with different port is opened. Johannes Ullrich of the Internet Storm Centre who is studying this particular worm, says that “This may be a ‘bot’ if there is a functional command and control channel present”. Many routers have come under scrutiny from security researchers in the past year, after a series of demonstrations showed ways to break into the devices....