August 28, 2026
- VulnCheck traced the ZBT router supply chain and found two more built-in implants beyond the previously documented ENDLESSDOORS: DARKLANTERN and SPEAKINGSTONE — one offering remote root command execution, the other capable of stealing ISP credentials, hijacking DNS and opening reverse SSH tunnels. Sinkholing a backup C2 showed 390 of 392 devices phoning home were in China, mostly on China Mobile (VulnCheck, Dark Reading). The hardware ships worldwide as white-label product, so the brand on the box tells you nothing. · Supply Chain & Takedowns
in Australia Charges Two Over the TeamPCP Supply-Chain Spree