To act as a means for accessing other segments of the networks the router is connected.

To carry our DDoS attacks external to your networks.For espionage activities within those environments.Security researchers theorise that the purpose of the botnet may be larger than DDoS since some devices have been compromised for more than 2 years while also acting as stable command and control ( defined) sites for other botnets.Ī compromised router within a corporate or home environment could be used: The malware has the ability to persist (even with a factory reset since it is designed to access and replace the router’s flash memory) and to work around domain sinkholes (used by the security community to attempt to disable the malware).To carry out espionage activities or to act a proxy to other networks.It may be used to conduct DDos ( defined) attack.The overall intentions/purpose of the malware is unclear, but it does contain the following capabilities: This malware originated from the advanced persistent threat group (APT) known as Sandworm or Voodoo Bear known for attacks on the Ukrainian electrical grid in 20 in addition to previous router-based malware, namely VPNFilter and the high impact NotPetya malware. In the latter half of last week Trend Micro researchers acquired malware samples which target Asus consumer routers seeking to recruit these devices into a botnet ( defined). Since the group has previously targeted other vendors too, please make certain your router is security hardened (see below) and has the latest available firmware. Trend Micro security researchers have discovered a known and highly capable advanced persistent threat (APT) group targeting Asus routers to recruit those routers into a botnet.

Asus live update should i remove it