KadNap Malware Turning Asus Routers Into Botnets

A sophisticated new malware called KadNap has been discovered targeting Asus routers and conscripting them into a botnet for proxying malicious traffic. The malware employs a custom version of the Kademlia Distributed Hash Table protocol to conceal its command-and-control infrastructure within a peer-to-peer system, evading traditional network monitoring. The botnet, which has grown to over 14,000 infected devices, is marketed by a proxy service called Doppelganger, tailored for criminal activity. More than 60% of KadNap's victims are based in the United States. The malware demonstrates versatility by targeting various edge networking devices and employing different C2 servers for different victim types.

• Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits EmergeBotnet2026-10-23
• Anthropic warns self-replicating AI could spread to your smart devicesAnalysis2026-10-13
• The phone was compromised before the user turned it on: the rise of Midnight MimosaMalware2026-10-12
• In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 YearsAnalysis2026-10-09
• XWorm Malware: Worming Its Way From Entry to ExploitationMalware2026-10-05