Widespread disruptions of DrayTek routers have been reported globally since March 22, 2025, due to continuous reboot loops, attributed to the exploitation of known vulnerabilities. Users in countries like the UK and Australia are affected. ISPs advise upgrading firmware and implementing security measures, while GreyNoise tracks active exploit attempts. Immediate action is recommended for affected users.
Operation Rewrite: Chinese-Speaking Threat Actors Deploy BadIIS in a Wide Scale SEO Poisoning Campaign – Palo Alto Networks
Operation Rewrite: Chinese-Speaking Threat Actors Deploy BadIIS in a Wide Scale SEO Poisoning Campaign Palo Alto Networks
