bleeping-computer · Crawled Oct 16, 2026
Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
1 CVEs
Read original article ↗
AI Summary
A proxyjacking campaign has compromised D-Link, Ubiquiti, and other edge devices across 34 countries, leveraging known vulnerabilities to install the legitimate bandwidth-sharing app Pawns.app without user consent. The attackers monetize victims' internet bandwidth by enrolling devices into a residential proxy network, potentially earning payouts through unauthorized participation. The campaign exploited specific vulnerabilities in D-Link ShareCenter NAS, Ubiquiti UniFi Video NVR, and SAP NetWeaver, with evidence of SSH key configuration for persistent access. Organizations are advised to patch known vulnerabilities and secure internet-facing devices to prevent compromise.
AI-extracted · verify before operational use
Extracted Entities 1 found
MITRE ATT&CK TTPs 17 techniques
T1059.001 PowerShell · Execution T1059.004 Unix Shell · Execution T1071.001 Web Protocols · Command And Control T1078.001 Default Accounts · Defense Evasion T1082 System Information Discovery · Discovery T1083 File and Directory Discovery · Discovery T1095 Non-Application Layer Protocol · Command And Control T1105 Ingress Tool Transfer · Command And Control T1129 Shared Modules · Execution T1133 External Remote Services · Persistence T1135 Network Share Discovery · Discovery T1140 Deobfuscate/Decode Files or Information · Defense Evasion T1170 T1170 T1197 BITS Jobs · Defense Evasion T1205.001 Port Knocking · Defense Evasion T1485 Data Destruction · Impact T1566 Phishing · Initial Access