China-Backed Hackers' New Malware Turns WiFi Routers Into Malicious Proxy; CPR Shares Details

China-backed hackers are using new malware that can turn routers into malicious proxies.

Check Point Research, a leading cyberthreat intelligence organization, confirmed this new discovery in its official report.

"Over the past few months, Check Point Research has closely monitored a series of targeted attacks aimed at European foreign affairs entities," said the cybersecurity agency via its official blog post.

CPR added that these campaigns are linked to a Chinese state-sponsored APT group, which it calls the Camaro Dragon.

China-Backed Hackers' New Malware Turns WiFi Routers Into Malicious Proxy

According to Ars Technica's latest report, the new malware is used by Chinese state-backed hackers to target routers in small offices and residential areas.

This new malicious firmware allows them to turn WiFi routers into a network, which will stealthily relay traffic to command and control servers.

CPR stated that the new malware contains a full-featured backdoor. This enables malicious actors to establish communications, as well as file transfers with infected devices.

Aside from these, the new malware can remotely issue commands, and delete, download, and upload files as well.

Check Point Research experts said that the malware was discovered in the form of firmware images for TP-Link routers.

Main Purpose of the New Malware

Check Point Research explained that the malware's main purpose appears to be sending traffic between infected routers.

But, the cybersecurity intelligence agency discovered that the control infrastructure was operated by hackers connected to Mustang Panda; an advanced threat actor that works on behalf of the Chinese government.

CPR explained that the ties of the Chinese state-backed hackers to the Mustang Panda hint that they are only using WiFi routers as a means to achieve another goal.

Check Point Research said that the new malware was discovered while they were investigation malicious campaigns attacking European foreign affairs entities.

If you want to learn more about this new malware, you can click this link.

In other stories, the Federal Trade Commission warned about the rising phishing scams on PayPal and MetaMask.

Recently, security experts issued a warning about fake software offering ChatGPT-based tools to Facebook users.

For more news updates about malware and other security threats, always keep your tabs open here at TechTimes.