GLOBEALERT
CYBERELEVATEDJun 22 · Jun 22, 2026, 6:57 AM

AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network

The Hacker News

A new malware family is turning forgotten home routers into a distributed reconnaissance and proxy network, not the DDoS botnet these devices usually end up in. QiAnXin's XLab calls it AryStinger and counts at least 4,300 infected routers, a total it says is still rising. The distinction matters. AryStinger exists for the stage of an attack that comes before the break-in. Infected

GlobeAlert aggregates and classifies open sources; the story above belongs to its publisher. Summaries are machine-generated from the source text.

More in Cyber