Cybersecurity experts have discovered a botnet — a network of compromised routers — that uses misconfigured DNS records to bypass email protection systems to send malware through spam campaigns. Comprising around 13,000 MikroTik routers, the botnet uses various types of cyberattacks, including DDoS attacks, data theft, and cryptojacking. The attackers impersonated DHL and spoofed legitimate sender domains due to issues with SPF records. To protect against these threats, experts recommend regularly monitoring DNS records and email traffic, user education, and regular system penetration testing.

New Triada comes preinstalled on Android devices
A new variant of the Triada Trojan has been discovered pre-installed on Android devices, enabling data theft from the moment the device is set up,