14,000 Routers Enlisted in Takedown‑Resistant KadNap Botnet

Researchers uncovered KadNap, a Kademlia-based botnet that has infected about 14,000 routers and network devices to operate an anonymous proxy service. Most infections are Asus routers in the US and the botnet’s peer-to-peer DHT design resists traditional takedowns. Isolate suspect devices, apply

Part of the PlainSec briefing for 2026-03-15

Sources