AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network

AI Summary

QiAnXin's XLab identified AryStinger, a new malware family that has infected at least 4,300 legacy home routers — primarily D-Link devices — to build a distributed reconnaissance and proxy network rather than a traditional DDoS botnet. Unlike typical router botnets, AryStinger is designed for the pre-exploitation phase of attacks, providing threat actors with anonymized infrastructure for reconnaissance operations. The malware count is still rising, and the focus on pre-attack staging makes it a high-value tool for targeted intrusion campaigns.

Read full article → https://thehackernews.com/2026/06/arystinger-malwa…

Relevance score: 79.0/100

AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network

# More from June 23