AryStinger botnet infected thousands of D-Link routers worldwide

AryStinger botnet has compromised 4,000+ D-Link routers (DIR-850L, DIR-818LW) worldwide by exploiting known vulnerabilities, converting them into remote proxies for scanning, tunneling, and command execution. Attackers can modify DNS settings to hijack traffic and monitor network activity. Infections are concentrated in Asia but pose global risk to organizations using affected models.