Top all-time · #4492
Lumen Technologies
Company blog · blog.lumen.comsecurity
Lumen Technologies is the company blog at blog.lumen.com, writing about security. Since 2021, 17 different Hacker News readers have linked it 17 times, most often “ZuoRAT Hijacks Soho Routers to Silently Stalk Networks”. No feed was found, so read it on the site itself.
Too few sampled comments (6) to say how often HN recommends it.?
Why HN links it
HN readers link Lumen's security research blog for threat analysis of router botnets, malware and DDoS reflection attacks, often as the primary source behind Ars Technica news stories.
Summarised by Claude from a sample of 6 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
The Lumen blog and newsroom is your source for business technology news and insights, customer stories, press and media, and trending articles.
Most-linked posts?
- ZuoRAT Hijacks Soho Routers to Silently Stalk Networks3 people · 3 mentions · first linked 2022-06-29
- The Pumpkin Eclipse2 people · 2 mentions · first linked 2024-05-30
- /windows-subsystem-for-linux-wsl-threats/2 people · 2 mentions · first linked 2022-05-29
What Hacker News says?
If you're vulnerable to attacks from the LAN, you're vulnerable to your wi-fi router (or your coffee shop/workplace's router) being compromised, which is quite common; see e.g. https://www.bleepingcomputer.com/news/security/mirai-botnet-... and https://blog.lumen.com/the-pumpkin-eclipse/ Assuming that most routers are silently compromised, with their command-and-control operators just waiting for an exploit like thi…
Comment linking /the-pumpkin-eclipse/
on “Attacking UNIX Systems via CUPS”Submitted The Pumpkin Eclipse as a story · 355 points
HN discussionHi OP here In my experience I think the biggest bottleneck that I've found is filesystem performance. FFS (Fast File System) is pretty freakin slow, and you should really consider redundancy options in case one of the drives fails because its tolerance for recovery from failure isn't the best. It definitely isn't the most optimal or sometimes even viable solution for when you need performance on the filesystem to be…
Comment linking /windows-subsystem-for-linux-wsl-threats/
on “How I would sell OpenBSD as a salesperson”Submitted Black Lotus Labs uncovers Linux executables deployed as stealth Windows loaders as a story · 128 points
HN discussionTL;DR of Ars: Connectionless LDAP Actual article that Ars writes about: https://blog.lumen.com/cldap-reflectors-on-the-rise-despite-... Actual news (less vague title than Ars'): the number of vulnerable systems has increased ("from the 7K range to over 12K" "over the last 12 months"). Only 15% stays online longer than a year, though, so it seems that most admins catch on after a while. "[T]he Connectionless Lightwei…
Comment linking /cldap-reflectors-on-the-rise-despite-best-practice/
on “The Windows servers that have been fueling DDoSes for months”Submitted Chaos is a Go-based Swiss army knife of malware as a story · 5 points
HN discussionThis is a spam site. Actual link: https://blog.lumen.com/windows-subsystem-for-linux-wsl-threa...
Comment linking /windows-subsystem-for-linux-wsl-threats/
on “Windows Subsystem for Linux Virus Steals Browser Auth Cookies”Submitted ZuoRAT Hijacks Soho Routers to Silently Stalk Networks as a story · 4 points
HN discussionThere's a lot more information in the Black Lotus Labs blog post that Ars links to: > However, as of the time of this writing, we have only been able to obtain the exploit script for JCG-Q20 model routers. In this case, the actor exploited known CVEs (CVE-2020-26878 and CVE-2020-26879) > The device types consisted of, but were not limited to: Cisco RV 320, 325 and 420; Asus RT-AC68U, RT-AC530, RT-AC68P and RT-AC1900…
Comment linking /zuorat-hijacks-soho-routers-to-silently-stalk-networks/
on “A wide range of routers are under attack by new, unusually sophisticated malware”Submitted Derailing the Raptor Train as a story · 2 points
HN discussionThe article from the security researchers is a fascinating read: https://blog.lumen.com/the-darkside-of-themoon/
Comment linking /the-darkside-of-themoon/
on “Researchers Discover 40k-Strong EOL Router, IoT Botnet”Submitted New Cuttlefish malware intercepts router traffic, steals credentials as a story · 2 points
HN discussionSubmitted ZuoRAT Hijacks Soho Routers to Silently Stalk Networks as a story · 2 points
HN discussionSubmitted New Konni Campaign Targets Russian Ministry of Foreign Affairs as a story · 2 points
HN discussionSubmitted Pulling Back the Curtain: Development and Testing for Low Latency Dash Support as a story · 2 points
HN discussionSubmitted The J-Magic Show: Magic Packets and Where to Find Them as a story · 1 points
HN discussionSubmitted Qakbot: Retool, Reinfect, Recycle as a story · 1 points
HN discussion
