D-Link warned users of several legacy router models about known vulnerabilities actively exploited by botnets.
These devices, which have reached End-of-Life (EOL) and End-of-Service (EOS), are at heightened risk of being targeted by malware strains known as “Ficora” and “Capsaicin.”
The affected devices include the following models:
These routers, spanning all hardware revisions and firmware versions, are no longer supported.
Their firmware development ceased well before 2024. For instance, DIR-645 reached EOS in 2018, while other international models like DIR-806, GO-RT-AC750, and DIR-845L were discontinued between 2016 and 2018.
Reports from Fortiguard detail how the malware botnets Ficora and Capsaicin exploit these unsupported routers to carry out malicious activities.
These botnets target outdated firmware, taking advantage of security gaps that no longer receive updates or patches.
Once compromised, these routers can be used for Distributed Denial-of-Service (DDoS) attacks, data theft, or launching further malware campaigns.
D-Link has emphasized that continuing to use EOL/EOS devices presents significant cybersecurity risks. Unsupported devices often lack critical firmware updates and security patches, making them highly susceptible to modern cyberattacks.
D-Link strongly advises users to retire these routers immediately and replace them with newer models that receive regular firmware updates.
For consumers in North America, D-Link suggests the following actions:
While this advisory primarily targets users in North America, D-Link urges all international users of legacy devices to consult their regional D-Link offices for tailored recommendations.
The company highlights the importance of staying ahead of technological advancements and ensuring equipment aligns with current cybersecurity standards.
D-Link’s decision to classify these models as EOL/EOS aligns with the natural lifecycle of technological products.
As these devices age, they become obsolete due to security measures and advancements in wireless technology. The company stresses the importance of upgrading to newer models to safeguard users against evolving threats.
Investigate Real-World Malicious Links, Malware & Phishing Attacks With ANY.RUN – Try for Free
Secure Ideas, a premier provider of penetration testing and security consulting services, proudly announces its…
Symantec has recently identified a sophisticated phishing campaign targeting users of Monex Securities (マネックス証券), a…
In a concerning development, CERT-UA, Ukraine's Computer Emergency Response Team, has reported a series of…
Hunters International, a ransomware group suspected to be a rebrand of the infamous Hive ransomware,…
In a recent cyberattack attributed to the Qilin ransomware group, threat actors successfully compromised a…
A newly uncovered cyber-espionage campaign, dubbed Operation HollowQuill, has been identified as targeting academic, governmental,…
