KadNap Enlists 14,000+ Edge Routers into Proxy Botnet
KadNap has infected over 14,000 edge devices, primarily Asus routers, to build a stealth proxy botnet. Operators use a Kademlia DHT peer-to-peer C2 and sell access via the Doppelgänger proxy service; over 60% of infections are in the U.S. Investigate and isolate affected routers, apply vendor