THOUSANDS OF HACKED TP-LINK ROUTERS USED IN YEARS-LONG ACCOUNT TAKEOVER ATTACKS

Summary from the TLDR InfoSec newsletter

Chinese hackers are using "Botnet-7777" to conduct stealthy password spray attacks against Azure cloud accounts, targeting organizations across multiple sectors. Comprising mainly TP-Link routers, the 8,000-device botnet's distributed nature and low-volume attempts make detection difficult.