http://deepweb4e556skw2k3dstonoj6qhyu3fts5iyuwqowrdhnqhnq3wh7qd.onion/blog/newest/the-resilient-threat-ngioweb-botnet-still-going-strong-after-seven-years
Key observations include: Linear eMerge Exploits : Two dedicated IP addresses run scanners that search for vulnerabilities in access control systems, specifically exploiting CVE-2019-7256. Zyxel Routers : Attackers target models like the vmg8623-t50b, capitalizing on severe vulnerabilities that have historically plagued these routers. Neato Vacuums : Although Neato ended operations, 128,000 devices remain connected and vulnerable, particularly in the U.S. and India.