Cybercriminals and nation-states are observed sharing compromised networks in 'Router Roulette'

The article by Trend Micro discusses the collaboration between cybercriminals and nation-states in sharing compromised networks, particularly focusing on the dangers of internet-facing routers like the EdgeRouters, highlighting instances of exploitation by groups like Pawn Storm. It details the botnet using compromised EdgeRouter devices disrupted by the FBI, the persistence of threats post-disruption, the presence of Ngioweb malware on EdgeOS, and the continuous need to secure internet-facing routers. Recommendations are provided for network defenders to check for backdoors and indicators of compromise, emphasizing the importance of safeguarding against cyber threats in 'Router Roulette

'
https://www.trendmicro.com/en_us/research/24/e/router-roulette.html