AVrecon

Reported Context (5)

#AryStinger AryStinger Botnet Reportedly Compromises More Than 4,000 Routers
AVrecon is a modular router-targeting malware that scans for exposed services and exploits RCE, command injection, and SOAP flaws to convert home and SOHO routers into proxy nodes. FBI Details AVrecon Router Malware Used by SocksEscort Proxy Network
The FBI on Thursday issued an alert for the AVrecon malware that has powered the SocksEscort service. Authorities Disrupt SocksEscort Proxy Service Powered by AVrecon
The FBI warned that AVRecon malware targets routers and IoT devices across many models from vendors like Cisco, DâLink, MicroTik, Netgear, TPâLink, Hikvision and Zyxel, and investigators tied the platform to U.S. and European Authorities Disrupt SocksEscort Proxy Network
disrupted the SocksEscort proxy network that routed traffic through edge devices compromised by the AVRecon Linux malware, which had averaged about 20,000 infected devices weekly and advertised “clean” ISP IPs. U.S. and European Authorities Disrupt SocksEscort Proxy Network Powered by AVRecon

CVE (3)

Malware (1)

People (1)

MITRE ATT&CK (9)

Vendors (9)

Products (2)

Industries (1)

Countries (14)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.