Tag: rtl819x

1 Attack Reports | 0 Vulnerabilities

Attack reports

More Than 4,000 Legacy Routers Compromised by AryStinger, Turned into Global Attack Proxies for Hackers

Security researchers discovered AryStinger, a botnet targeting legacy routers and NAS devices to build reconnaissance and attack infrastructure. The malware exploits vulnerabilities from 2013-2025 to compromise over 4,300 devices globally, primarily D-Link routers using RTL819X chips. AryStinger co…

distributed scanning

dropbear backdoor

reconnaissance infrastructure

Published: June 17, 2026

Linked vulnerabilities : CVE-2013-3307, CVE-2025-11837 (CVSS 8.1), CVE-2016-5681

Downloadable IOCs: 13

Click here to see more Attack Reports