[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwAgVQ0bru4bVDA15wJdXHgqzZNc1OwlrSRGWjFd2ab4":3},{"article":4,"iocs":54,"watch_terms":67,"solutions":68,"lesson":139},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"11e4bf7e-c2e7-4438-9d27-6a8c73f5be6e","Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth","hackers-hijack-d-link-ubiquiti-devices-to-resell-your-stolen-bandwidth-f6df72","A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. [...]","A proxyjacking campaign has compromised over 143 devices across 34 countries, primarily D-Link and Ubiquiti hardware, to monetize victims' internet connections. Attackers exploit known vulnerabilities like CVE-2024-3272 and CVE-2021-44228 to install the Pawns.app legitimate bandwidth-sharing software without user consent, rerouting traffic through these compromised devices.","Hackers hijack D-Link, Ubiquiti devices to resell stolen bandwidth via Pawns.app.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fhackers-hijack-d-link-ubiquiti-devices-to-resell-your-stolen-bandwidth\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F10\u002F15\u002Fintrernet.jpg","2026-10-15T18:20:59+00:00","2026-10-15T20:00:10.780081+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"ShareCenter NAS","product",{"name":21,"type":22},"D-Link","vendor",{"name":24,"type":19},"UniFi Video NVR",{"name":26,"type":22},"Ubiquiti",{"name":28,"type":19},"NetWeaver Visual Composer",{"name":30,"type":22},"SAP","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":31,"icon":33,"name":34,"slug":35},null,"Malware","malware",[37,42,44,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55,59,61,64],{"type":56,"value":57,"context":58},"cve","CVE-2024-3272","Vulnerability in D-Link ShareCenter NAS exploited in campaign",{"type":56,"value":60,"context":58},"CVE-2024-3273",{"type":56,"value":62,"context":63},"CVE-2021-44228","Vulnerability in Ubiquiti UniFi Video NVR exploited in campaign",{"type":56,"value":65,"context":66},"CVE-2025-31324","Vulnerability in SAP NetWeaver Visual Composer exploited in campaign",[30,21,26],{"controls":69,"vendors":138},[70,99,124],{"slug":71,"name":72,"problem":73,"products":74},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[75,83,91],{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":100,"name":101,"problem":102,"products":103},"patch-management","Automated patch management","Known holes get closed in days, not months.",[104,112,120],{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":100,"product_name":121,"url":122,"description":123},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":125,"name":126,"problem":127,"products":128},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[129,130],{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",[],{"slug":140,"title":141,"body":142,"framework_refs":143,"framework_notes":154},"unpatched-routers-hijacked-to-silently-sell-your-bandwidth","Unpatched Routers Hijacked to Silently Sell Your Bandwidth","Attackers exploited well-known, publicly disclosed vulnerabilities (CVE-2024-3272 and CVE-2021-44228) in D-Link and Ubiquiti devices that had not been patched by their owners, compromising over 143 devices across 34 countries. By installing legitimate bandwidth-sharing software (Pawns.app) without user consent, threat actors monetize victims' internet connections while remaining difficult to detect through traditional malware scanning. This attack highlights the persistent danger of leaving network edge devices unpatched, as consumer and SMB-grade hardware is frequently overlooked in patch cycles. The campaign also demonstrates how attackers increasingly abuse legitimate tools to evade detection, making proactive vulnerability management and monitoring critical for network appliances.",[144,145,146,147,148,149,150,151,152,153],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SP 800-115: Technical Guide to Information Security Testing","NIST CSF DE.CM-1: Network monitoring to detect cybersecurity events","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 SC-7: Boundary Protection","ITIL: Change and Release Management (firmware update governance)","ISO\u002FIEC 27001:2022 Annex A 8.8: Management of technical vulnerabilities",{}]