Lizard Stresser Runs on Hacked Home Routers
Summary: The Lizard Squad, the group that knocked Sony and Microsoft's gaming networks offline over the holidays, launched a booter service called LizardStresser whose botnet is made up mostly of thousands of hacked home Internet routers protected by factory-default usernames and passwords. The malware, a variation on code documented by Dr. Web in November, scans for other devices accepting telnet connections with default credentials such as "admin/admin" or "root/12345," and the botnet controller sits in the same address space (217.71.50.x) as the LizardStresser website.
Bottom line: The attack capacity that took down KrebsOnSecurity in early 2015 was assembled from consumer routers that were never reconfigured out of the box, meaning the same default credentials sitting on home and small-business gear are what turn individual devices into someone else's attack infrastructure.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026