RESEARCHERS FIND PERSISTENT BACKDOOR IN ZBTLINK ROUTERS

Summary from the TLDR InfoSec newsletter

VulnCheck researchers discovered an intentional and unpatchable backdoor dubbed EndlessDoors in over 100,000 active Zbtlink and Wiflyer routers that initiates outbound command-and-control connections to bypass NAT, requiring defenders to monitor port 7000 for malicious beacons and physically replace the compromised hardware.