Flutterby™! : Check your router

US CERT Alert (TA18-145A) Cyber Actors Target Home and Office Routers and Networked Devices Worldwide

Cybersecurity researchers have identified that foreign cyber actors have compromised hundreds of thousands of home and office routers and other networked devices worldwide [1] [2]. The actors used VPNFilter malware to target small office/home office (SOHO) routers. VPNFilter malware uses modular functionality to collect intelligence, exploit local area network (LAN) devices, and block actor-configurable network traffic. Specific characteristics of VPNFilter have only been observed in the BlackEnergy malware, specifically BlackEnergy versions 2 and 3.

Cisco's Talos Intelligence Group Blog: New VPNFilter malware targets at least 500K networking devices worldwide