Chinese-Made Zbtlink Routers Ship With a Backdoor That Opens Unauthenticated Root Shells

Cybersecurity researchers disclosed details of a factory-installed backdoor in at least 20 Chinese-made Zbtlink router models. According to VulnCheck, the implant appears in all 21 Zbtlink firmware images currently available, spanning more than two years, starts automatically, and may attempt to contact Chinese command-and-control infrastructure as often as every 35 seconds.