Threats · 188 days ago
KadNap has infected over 14,000 edge devices, primarily Asus routers, to build a stealth proxy botnet. Operators use a Kademlia DHT peer-to-peer C2 and sell access via the Doppelgänger proxy service; over 60% of infections are in the U.S. Investigate and isolate affected routers, apply vendor
2 sources covering this story
KadNap Malware Infects 14,000+ Edge Devices to Power Stealth Proxy Botnet
KadNap botnet infects 14,000+ routers using DHT-based P2P control while ClipXDaemon hijacks crypto wallets on Linux X11.
New KadNap botnet hijacks ASUS routers to fuel cybercrime proxy network
A newly discovered botnet malware called KadNap is targeting ASUS routers and other edge networking devices to turn them into proxies for malicious traffic.
Part of the PlainSec briefing for 2026-03-15