In a joint advisory, cybersecurity and intelligence agencies from multiple nations, including the US, are issuing a stern warning to users of Ubiquiti EdgeRouter devices, advising immediate protective actions. This caution comes after recently dismantling a botnet composed of compromised routers as part of an operation code-named Dying Ember.
The botnet, dubbed MooBot, allegedly operated by a threat group associated with Russia, specifically APT28, has been implicated in aiding covert cyber operations and deploying customized malware for subsequent exploitation.