China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access
VulnCheck disclosed two undocumented factory implants, SPEAKINGSTONE (service yunmgrd, beacons over UDP port 10000 to a hardcoded C2) and DARKLANTERN (service infosrvd on UDP port 9992, which the stock firewall opens to any internet address), in firmware...