{"id":17387,"date":"2018-11-08T12:11:39","date_gmt":"2018-11-08T12:11:39","guid":{"rendered":"https:\/\/www.ispreview.co.uk\/?p=17387"},"modified":"2018-11-08T12:14:14","modified_gmt":"2018-11-08T12:14:14","slug":"broadcom-based-upnp-using-broadband-routers-hit-by-malware","status":"publish","type":"post","link":"https:\/\/www.ispreview.co.uk\/index.php\/2018\/11\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html","title":{"rendered":"Broadcom Based UPnP Using Broadband Routers Hit by Malware"},"content":{"rendered":"<p>Network security testers at <a href=\"https:\/\/blog.netlab.360.com\/bcmpupnp_hunter-a-100k-botnet-turns-home-routers-to-email-spammers-en\/\" target=\"_blank\" rel=\"noopener\">360 Netlab<\/a> have identified a new botnet called &#8220;<em>BCMPUPnP_Hunter<\/em>,&#8221; which uses vulnerabilities in Broadcom\u2019s implementation of the Universal Plug and Play (UPnP) protocol to hijack broadband ISP routers from manufactures like Billion, D-Link, TP-Link , ZyXEL etc.<!--more--><\/p>\n<p>At the time of writing it&#8217;s been suggested that around <strong>100,000 routers<\/strong> could have already been compromised and many of those appear to be older kit, although some like the Billion BiPAC 7800NXL can still be found on sale today. Overall 116 routers have so far been identified as compromised and once that happens then the device is commandeered to help find more victims.<\/p>\n<p>Most large botnets tend to be used for either <strong>Distributed Denial of Service<\/strong> (DDoS) style attacks against servers \/ websites or as huge email spamming networks. The <a href=\"https:\/\/blog.netlab.360.com\/bcmpupnp_hunter-a-100k-botnet-turns-home-routers-to-email-spammers-en\/\" target=\"_blank\" rel=\"noopener\">360 Netlab<\/a> team suggest that <strong>BCMPUPnP_Hunter<\/strong> may well end up being used for the latter.<\/p>\n<p>The biggest concern here is that this botnet has been able to install its malware on routers by exploiting a known vulnerability in the widely used <strong>UPnP<\/strong> protocol, which has existed since 2013 but was only made public in 2017 due to the sheer number of devices that use Broadcom&#8217;s vulnerable implementation.<\/p>\n<blockquote class=\"bq1\"><p><strong>360 Netlab Statement<\/strong><\/p>\n<p>UPnP is the acronym for Universal Plug and play, the Universal plug-in protocol. The goal of the agreement is to enable home networks (data sharing, communication and entertainment) and various devices in the corporate network to seamlessly connect with each other and simplify the implementation of related networks.<\/p>\n<p>Broadcom UPnP is a concrete implementation of Broadcom&#8217;s response to the UPnP protocol. As Broadcom is in the industry upstream of the supply chain, the implementation is adopted by major router manufacturers, including Asus, D-link, Zyxel, US Robotics, TP-link, Netgear and so on.<\/p>\n<p>In October 2013, security researchers at security research firm DefenseCode discovered the <a href=\"http:\/\/defensecode.com\/whitepapers\/From_Zero_To_ZeroDay_Network_Devices_Exploitation.txt\" target=\"_blank\" rel=\"noopener\">BroadCom UPnP format string vulnerability<\/a> in the protocol stack . Considering that the vulnerability affects products from several major router vendors, DefenseCode did not disclose their findings until 2017.<\/p>\n<p>The <a href=\"https:\/\/www.defensecode.com\/public\/DefenseCode_Broadcom_Security_Advisory.pdf\" target=\"_blank\" rel=\"noopener\">code disclosed<\/a> this time is of a verification nature. An attacker must complete the necessary vulnerability analysis and optimize the shellcode process on the basis of a publicly available document before it can be of practical power.<\/p><\/blockquote>\n<p>Sadly many of the routers involved are no longer being supported (too old). Meanwhile users of those that are still being supported often don&#8217;t go actively seeking the latest firmware updates, which may need to be applied in order to deliver the proper protection.<\/p>\n<p>Alternatively users with one of these routers should consider disabling UPnP, although in some cases this may stop some other connected devices or services from working (assuming they are dependent upon UPnP). Manual port forwarding can often be used to achieve the same result as UPnP but this can be quite complicated. Credits to <a href=\"https:\/\/www.theregister.co.uk\/2018\/11\/08\/upnp_spam_botnet_broadcom\/\" target=\"_blank\" rel=\"noopener\">The Register<\/a> for spotting this.<\/p>\n<blockquote><p><span style=\"color: #339966;\"><strong>List of Vulnerable Devices \/ Routers<\/strong><\/span><\/p>\n<p>ADB Broadband S.p.A, HomeStation <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/link\/adsl\">ADSL<\/a> Router<br \/>\nADB Broadband, ADB <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/link\/adsl\">ADSL<\/a> Router<br \/>\nADBB, ADB <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/link\/adsl\">ADSL<\/a> Router<br \/>\nALSiTEC, Broadcom ADSL Router<br \/>\nASB, ADSL Router<br \/>\nASB, ChinaNet EPON Router<br \/>\nASB, ChinaTelecom E8C(EPON) Gateway<br \/>\nActiontec, Actiontec GT784WN<br \/>\nActiontec, Verizon ADSL Router<br \/>\nBEC Technologies Inc., Broadcom ADSL Router<br \/>\nBest IT World India Pvt. Ltd., 150M Wireless-N ADSL2+ Router<br \/>\nBest IT World India Pvt. Ltd., iB-WRA300N<br \/>\nBillion Electric Co., Ltd., ADSL2+ Firewall Router<br \/>\nBillion Electric Co., Ltd., BiPAC 7800NXL<br \/>\nBillion, BiPAC 7700N<br \/>\nBillion, BiPAC 7700N R2<br \/>\nBinatone Telecommunication, Broadcom LAN Router<br \/>\nBroadcom, ADSL Router<br \/>\nBroadcom, ADSL2+ 11n <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/link\/wifi\">WiFi<\/a> CPE<br \/>\nBroadcom, Broadcom Router<br \/>\nBroadcom, Broadcom ADSL Router<br \/>\nBroadcom, D-Link <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/link\/adsl\">DSL<\/a>-2640B<br \/>\nBroadcom, D-link ADSL Router<br \/>\nBroadcom, DLink ADSL Router<br \/>\nClearAccess, Broadcom ADSL Router<br \/>\nComtrend, AR-5383n<br \/>\nComtrend, Broadcom ADSL Router<br \/>\nComtrend, Comtrend single-chip ADSL router<br \/>\nD-Link Corporation., D-Link <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/link\/adsl\">DSL<\/a>-2640B<br \/>\nD-Link Corporation., D-Link <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/link\/adsl\">DSL<\/a>-2641B<br \/>\nD-Link Corporation., D-Link DSL-2740B<br \/>\nD-Link Corporation., D-Link DSL-2750B<br \/>\nD-Link Corporation., D-LinkDSL-2640B<br \/>\nD-Link Corporation., D-LinkDSL-2641B<br \/>\nD-Link Corporation., D-LinkDSL-2741B<br \/>\nD-Link Corporation., DSL-2640B<br \/>\nD-Link, ADSL 4*FE 11n Router<br \/>\nD-Link, D-Link ADSL Router<br \/>\nD-Link, D-Link DSL-2640U<br \/>\nD-Link, D-Link DSL-2730B<br \/>\nD-Link, D-Link DSL-2730U<br \/>\nD-Link, D-Link DSL-2750B<br \/>\nD-Link, D-Link DSL-2750U<br \/>\nD-Link, D-Link DSL-6751<br \/>\nD-Link, D-Link DSL2750U<br \/>\nD-Link, D-Link Router<br \/>\nD-Link, D-link ADSL Router<br \/>\nD-Link, DVA-G3672B-LTT Networks ADSL Router<br \/>\nDARE, Dare router<br \/>\nDLink, D-Link DSL-2730B<br \/>\nDLink, D-Link VDSL Router<br \/>\nDLink, DLink ADSL Router<br \/>\nDQ Technology, Inc., ADSL2+ 11n <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/link\/wifi\">WiFi<\/a> CPE<br \/>\nDQ Technology, Inc., Broadcom ADSL Router<br \/>\nDSL, ADSL Router<br \/>\nDareGlobal, D-Link ADSL Router<br \/>\nDigicom S.p.A., ADSL Wireless Modem\/Router<br \/>\nDigicom S.p.A., RAW300C-T03<br \/>\nDlink, D-Link DSL-225<br \/>\nEltex, Broadcom ADSL Router<br \/>\nFiberHome, Broadcom ADSL Router<br \/>\nGWD, ChinaTelecom E8C(EPON) Gateway<br \/>\nGenew, Broadcom ADSL Router<br \/>\nINTEX, W150D<br \/>\nINTEX, W300D<br \/>\nINTEX, Wireless N 150 ADSL2+ Modem Router<br \/>\nINTEX, Wireless N 300 ADSL2+ Modem Router<br \/>\nITI Ltd., ITI Ltd.ADSL2Plus Modem\/Router<br \/>\nInteno, Broadcom ADSL Router<br \/>\nIntercross, Broadcom ADSL Router<br \/>\nIskraTEL, Broadcom ADSL Router<br \/>\nKasda, Broadcom ADSL Router<br \/>\nLink-One, Modem Roteador Wireless N ADSL2+ 150 Mbps<br \/>\nLinksys, Cisco X1000<br \/>\nLinksys, Cisco X3500<br \/>\nNB, DSL-2740B<br \/>\nNetComm Wireless Limited, NetComm ADSL2+ Wireless Router<br \/>\nNetComm, NetComm ADSL2+ Wireless Router<br \/>\nNetComm, NetComm <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/link\/wifi\">WiFi<\/a> Data and VoIP Gateway<br \/>\nOPTICOM, DSLink 279<br \/>\nOpticom, DSLink 485<br \/>\nOrcon, Genius<br \/>\nQTECH, QTECH<br \/>\nRaisecom, Broadcom ADSL Router<br \/>\nRamptel, 300Mbps ADSL Wireless-N Router<br \/>\nRouter, ADSL2+ Router<br \/>\nSCTY, TYKH PON Router<br \/>\nStar-Net, Broadcom ADSL Router<br \/>\nStarbridge Networks, Broadcom ADSL Router<br \/>\nTP-LINK Technologies Co., Ltd, 300Mbps Wireless N ADSL2+ Modem Router<br \/>\nTP-LINK Technologies Co., Ltd, 300Mbps Wireless N USB ADSL2+ Modem Router<br \/>\nTP-LINK, TP-LINK Wireless ADSL2+ Modem Router<br \/>\nTP-LINK, TP-LINK Wireless ADSL2+ Router<br \/>\nTechnicolor, CenturyLink TR-064 v4.0<br \/>\nTenda, Tenda ADSL2+ WIFI MODEM<br \/>\nTenda, Tenda ADSL2+ WIFI Router<br \/>\nTenda, Tenda Gateway<br \/>\nTenda\/Imex, ADSL2+ WIFI-MODEM WITH <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/link\/3g\">3G<\/a>\/<a href=\"https:\/\/www.ispreview.co.uk\/index.php\/link\/4g\">4G<\/a> USB PORT<br \/>\nTenda\/Imex, ADSL2+ WIFI-MODEM WITH EVO SUPPORT<br \/>\nUTStarcom Inc., UTStarcom ADSL2+ Modem Router<br \/>\nUTStarcom Inc., UTStarcom ADSL2+ Modem\/Wireless Router<br \/>\nUniqueNet Solutions, WLAN N300 ADSL2+ Modem Router<br \/>\nZTE, Broadcom ADSL Router<br \/>\nZTE, ONU Router<br \/>\nZYXEL, ZyXEL VDSL Router<br \/>\nZhone, Broadcom ADSL Router<br \/>\nZhone, Zhone Wireless Gateway<br \/>\nZoom, Zoom Adsl Modem\/Router<br \/>\nZyXEL, CenturyLink UPnP v1.0<br \/>\nZyXEL, P-660HN-51<br \/>\nZyXEL, ZyXEL xDSL Router<br \/>\nhuaqin, HGU210 v3 Router<br \/>\niBall Baton, iBall Baton 150M Wireless-N ADSL2+ Router<br \/>\niiNet Limited, BudiiLite<br \/>\niiNet, BoB2<br \/>\niiNet, BoBLite<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>Network security testers at 360 Netlab have identified a new botnet called &#8220;BCMPUPnP_Hunter,&#8221; which uses vulnerabilities in Broadcom\u2019s implementation of the Universal Plug and Play (UPnP) protocol to hijack broadband ISP routers from manufactures like Billion, D-Link, TP-Link , ZyXEL etc.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[1],"tags":[479],"class_list":["post-17387","post","type-post","status-publish","format-standard","hentry","category-uk_isp_news","tag-security"],"share_on_mastodon":{"url":"","error":""},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Broadcom Based UPnP Using Broadband Routers Hit by Malware - ISPreview UK<\/title>\n<meta name=\"description\" content=\"Network security testers at 360 Netlab have identified a new botnet called &quot;BCMPUPnP_Hunter,&quot; which uses vulnerabilities in Broadcom\u2019s implementation of\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ispreview.co.uk\/index.php\/2018\/11\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Broadcom Based UPnP Using Broadband Routers Hit by Malware - ISPreview UK\" \/>\n<meta property=\"og:description\" content=\"Network security testers at 360 Netlab have identified a new botnet called &quot;BCMPUPnP_Hunter,&quot; which uses vulnerabilities in Broadcom\u2019s implementation of\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ispreview.co.uk\/index.php\/2018\/11\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html\" \/>\n<meta property=\"og:site_name\" content=\"ISPreview UK\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ispreview\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/ispreview\" \/>\n<meta property=\"article:published_time\" content=\"2018-11-08T12:11:39+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-11-08T12:14:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.ispreview.co.uk\/wp-content\/uploads\/2020\/07\/ispreview_uk_logo.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"1000\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Mark Jackson\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ispreview\" \/>\n<meta name=\"twitter:site\" content=\"@ispreview\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Mark Jackson\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/2018\\\/11\\\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/2018\\\/11\\\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html\"},\"author\":{\"name\":\"Mark Jackson\",\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/#\\\/schema\\\/person\\\/de66a8b4e937c21c80e443d1bf9c35d5\"},\"headline\":\"Broadcom Based UPnP Using Broadband Routers Hit by Malware\",\"datePublished\":\"2018-11-08T12:11:39+00:00\",\"dateModified\":\"2018-11-08T12:14:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/2018\\\/11\\\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html\"},\"wordCount\":1022,\"commentCount\":3,\"publisher\":{\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/#organization\"},\"keywords\":[\"Security\"],\"articleSection\":[\"ISP News\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/2018\\\/11\\\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/2018\\\/11\\\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html\",\"url\":\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/2018\\\/11\\\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html\",\"name\":\"Broadcom Based UPnP Using Broadband Routers Hit by Malware - ISPreview UK\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/#website\"},\"datePublished\":\"2018-11-08T12:11:39+00:00\",\"dateModified\":\"2018-11-08T12:14:14+00:00\",\"description\":\"Network security testers at 360 Netlab have identified a new botnet called \\\"BCMPUPnP_Hunter,\\\" which uses vulnerabilities in Broadcom\u2019s implementation of\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/2018\\\/11\\\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/2018\\\/11\\\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/2018\\\/11\\\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.ispreview.co.uk\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Broadcom Based UPnP Using Broadband Routers Hit by Malware\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/#website\",\"url\":\"https:\\\/\\\/www.ispreview.co.uk\\\/\",\"name\":\"ISPreview UK\",\"description\":\"Top Broadband ISP and Mobile Provider Information Site\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.ispreview.co.uk\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/#organization\",\"name\":\"ISPreview.co.uk\",\"url\":\"https:\\\/\\\/www.ispreview.co.uk\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.ispreview.co.uk\\\/wp-content\\\/uploads\\\/2020\\\/07\\\/ispreview_uk_logo.jpg\",\"contentUrl\":\"https:\\\/\\\/www.ispreview.co.uk\\\/wp-content\\\/uploads\\\/2020\\\/07\\\/ispreview_uk_logo.jpg\",\"width\":1000,\"height\":1000,\"caption\":\"ISPreview.co.uk\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/ispreview\",\"https:\\\/\\\/x.com\\\/ispreview\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/mjack\\\/\",\"https:\\\/\\\/bsky.app\\\/profile\\\/ispreview.bsky.social\",\"https:\\\/\\\/mastodon.social\\\/@ispreview\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/#\\\/schema\\\/person\\\/de66a8b4e937c21c80e443d1bf9c35d5\",\"name\":\"Mark Jackson\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/nggallery_import\\\/Mark-Jackson-96x96.jpg\",\"url\":\"https:\\\/\\\/www.ispreview.co.uk\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/nggallery_import\\\/Mark-Jackson-96x96.jpg\",\"contentUrl\":\"https:\\\/\\\/www.ispreview.co.uk\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/nggallery_import\\\/Mark-Jackson-96x96.jpg\",\"caption\":\"Mark Jackson\"},\"description\":\"By Mark Jackson Mark is a professional technology writer, IT consultant and computer engineer from Dorset (England), he also founded ISPreview in 1999 and enjoys analysing the latest telecoms and broadband developments. Find me on X (Twitter), Mastodon, Facebook, BlueSky, Threads.net and Linkedin.\",\"sameAs\":[\"http:\\\/\\\/www.ispreview.co.uk\",\"https:\\\/\\\/www.facebook.com\\\/ispreview\",\"https:\\\/\\\/x.com\\\/ispreview\"],\"url\":\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/author\\\/markj\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Broadcom Based UPnP Using Broadband Routers Hit by Malware - ISPreview UK","description":"Network security testers at 360 Netlab have identified a new botnet called \"BCMPUPnP_Hunter,\" which uses vulnerabilities in Broadcom\u2019s implementation of","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ispreview.co.uk\/index.php\/2018\/11\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html","og_locale":"en_GB","og_type":"article","og_title":"Broadcom Based UPnP Using Broadband Routers Hit by Malware - ISPreview UK","og_description":"Network security testers at 360 Netlab have identified a new botnet called \"BCMPUPnP_Hunter,\" which uses vulnerabilities in Broadcom\u2019s implementation of","og_url":"https:\/\/www.ispreview.co.uk\/index.php\/2018\/11\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html","og_site_name":"ISPreview UK","article_publisher":"https:\/\/www.facebook.com\/ispreview","article_author":"https:\/\/www.facebook.com\/ispreview","article_published_time":"2018-11-08T12:11:39+00:00","article_modified_time":"2018-11-08T12:14:14+00:00","og_image":[{"width":1000,"height":1000,"url":"https:\/\/www.ispreview.co.uk\/wp-content\/uploads\/2020\/07\/ispreview_uk_logo.jpg","type":"image\/jpeg"}],"author":"Mark Jackson","twitter_card":"summary_large_image","twitter_creator":"@ispreview","twitter_site":"@ispreview","twitter_misc":{"Written by":"Mark Jackson","Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/www.ispreview.co.uk\/index.php\/2018\/11\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html#article","isPartOf":{"@id":"https:\/\/www.ispreview.co.uk\/index.php\/2018\/11\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html"},"author":{"name":"Mark Jackson","@id":"https:\/\/www.ispreview.co.uk\/#\/schema\/person\/de66a8b4e937c21c80e443d1bf9c35d5"},"headline":"Broadcom Based UPnP Using Broadband Routers Hit by Malware","datePublished":"2018-11-08T12:11:39+00:00","dateModified":"2018-11-08T12:14:14+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ispreview.co.uk\/index.php\/2018\/11\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html"},"wordCount":1022,"commentCount":3,"publisher":{"@id":"https:\/\/www.ispreview.co.uk\/#organization"},"keywords":["Security"],"articleSection":["ISP News"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.ispreview.co.uk\/index.php\/2018\/11\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.ispreview.co.uk\/index.php\/2018\/11\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html","url":"https:\/\/www.ispreview.co.uk\/index.php\/2018\/11\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html","name":"Broadcom Based UPnP Using Broadband Routers Hit by Malware - ISPreview UK","isPartOf":{"@id":"https:\/\/www.ispreview.co.uk\/#website"},"datePublished":"2018-11-08T12:11:39+00:00","dateModified":"2018-11-08T12:14:14+00:00","description":"Network security testers at 360 Netlab have identified a new botnet called \"BCMPUPnP_Hunter,\" which uses vulnerabilities in Broadcom\u2019s implementation of","breadcrumb":{"@id":"https:\/\/www.ispreview.co.uk\/index.php\/2018\/11\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ispreview.co.uk\/index.php\/2018\/11\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.ispreview.co.uk\/index.php\/2018\/11\/broadcom-based-upnp-using-broadband-routers-hit-by-malware.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ispreview.co.uk\/"},{"@type":"ListItem","position":2,"name":"Broadcom Based UPnP Using Broadband Routers Hit by Malware"}]},{"@type":"WebSite","@id":"https:\/\/www.ispreview.co.uk\/#website","url":"https:\/\/www.ispreview.co.uk\/","name":"ISPreview UK","description":"Top Broadband ISP and Mobile Provider Information Site","publisher":{"@id":"https:\/\/www.ispreview.co.uk\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ispreview.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.ispreview.co.uk\/#organization","name":"ISPreview.co.uk","url":"https:\/\/www.ispreview.co.uk\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.ispreview.co.uk\/#\/schema\/logo\/image\/","url":"https:\/\/www.ispreview.co.uk\/wp-content\/uploads\/2020\/07\/ispreview_uk_logo.jpg","contentUrl":"https:\/\/www.ispreview.co.uk\/wp-content\/uploads\/2020\/07\/ispreview_uk_logo.jpg","width":1000,"height":1000,"caption":"ISPreview.co.uk"},"image":{"@id":"https:\/\/www.ispreview.co.uk\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/ispreview","https:\/\/x.com\/ispreview","https:\/\/www.linkedin.com\/in\/mjack\/","https:\/\/bsky.app\/profile\/ispreview.bsky.social","https:\/\/mastodon.social\/@ispreview"]},{"@type":"Person","@id":"https:\/\/www.ispreview.co.uk\/#\/schema\/person\/de66a8b4e937c21c80e443d1bf9c35d5","name":"Mark Jackson","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.ispreview.co.uk\/wp-content\/uploads\/2023\/01\/nggallery_import\/Mark-Jackson-96x96.jpg","url":"https:\/\/www.ispreview.co.uk\/wp-content\/uploads\/2023\/01\/nggallery_import\/Mark-Jackson-96x96.jpg","contentUrl":"https:\/\/www.ispreview.co.uk\/wp-content\/uploads\/2023\/01\/nggallery_import\/Mark-Jackson-96x96.jpg","caption":"Mark Jackson"},"description":"By Mark Jackson Mark is a professional technology writer, IT consultant and computer engineer from Dorset (England), he also founded ISPreview in 1999 and enjoys analysing the latest telecoms and broadband developments. Find me on X (Twitter), Mastodon, Facebook, BlueSky, Threads.net and Linkedin.","sameAs":["http:\/\/www.ispreview.co.uk","https:\/\/www.facebook.com\/ispreview","https:\/\/x.com\/ispreview"],"url":"https:\/\/www.ispreview.co.uk\/index.php\/author\/markj"}]}},"_links":{"self":[{"href":"https:\/\/www.ispreview.co.uk\/index.php\/wp-json\/wp\/v2\/posts\/17387","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ispreview.co.uk\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ispreview.co.uk\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ispreview.co.uk\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ispreview.co.uk\/index.php\/wp-json\/wp\/v2\/comments?post=17387"}],"version-history":[{"count":0,"href":"https:\/\/www.ispreview.co.uk\/index.php\/wp-json\/wp\/v2\/posts\/17387\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.ispreview.co.uk\/index.php\/wp-json\/wp\/v2\/media?parent=17387"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ispreview.co.uk\/index.php\/wp-json\/wp\/v2\/categories?post=17387"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ispreview.co.uk\/index.php\/wp-json\/wp\/v2\/tags?post=17387"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}