ARYSTINGER BOTNET COMPROMISES 4,000+ D-LINK ROUTERS

Security researchers identified AryStinger targeting vulnerable D-Link router models, exploiting known weaknesses in outdated firmware. The botnet converts infected routers into proxy nodes, enabling threat actors to route malicious traffic through legitimate networks while obscuring their true origin. The attack primarily affects users who have failed to update their router firmware or are running end-of-life device models. D-Link routers have been targeted by multiple botnet campaigns in recent years due to their prevalence in residential and small business networks. Affected users should immediately verify their router firmware version against the latest available updates from D-Link. Factory resetting the device and reconfiguring with strong credentials is recommended for compromised routers. Organizations managing large networks of D-Link equipment should prioritize patching or replacing vulnerable models to prevent similar infections.