{"id":13315,"date":"2018-11-26T18:25:53","date_gmt":"2018-11-26T15:25:53","guid":{"rendered":"https:\/\/vasexperts.com\/?p=13315"},"modified":"2025-09-09T15:07:38","modified_gmt":"2025-09-09T12:07:38","slug":"the-botnet-spams-via-routers","status":"publish","type":"post","link":"https:\/\/vasexperts.com\/br\/blog\/security\/the-botnet-spams-via-routers\/","title":{"rendered":"The botnet spams via routers"},"content":{"rendered":"360Netlab notes that this is the highest activity compared to other previously studied botnets.\r\n\r\nThe interaction between the botnet and the \u201cvictim\u201d took place in several stages (see figure below). First, TCP port 5431 was scanned. Then, UDP port 1900 was checked\u2014a specific sequence was sent to it, waiting for a vulnerable URL provided by the device in response. After receiving the vulnerable link, four more sessions with the device took place to determine the entry point for running shell code in the device\u2019s memory. As a result, the device was turned into a bot that performed the tasks of the primary botnet.\r\n\r\n<noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/2018\/11\/botnet-interaction.jpg\" alt=\"botnet interaction\" width=\"100%\" height=\"auto\" class=\"alignnone size-full wp-image-13319\" srcset=\"\/wp-content\/uploads\/2018\/11\/botnet-interaction.jpg 798w, \/wp-content\/uploads\/2018\/11\/botnet-interaction-300x230.jpg 300w, \/wp-content\/uploads\/2018\/11\/botnet-interaction-768x588.jpg 768w\" sizes=\"(max-width: 798px) 100vw, 798px\"><\/noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/2018\/11\/botnet-interaction.jpg\" alt=\"botnet interaction\" width=\"100%\" height=\"auto\" class=\"alignnone size-full wp-image-13319 lazyload\" sizes=\"(max-width: 798px) 100vw, 798px\" data-src=\"\/wp-content\/uploads\/2018\/11\/botnet-interaction.jpg\" data-srcset=\"\/wp-content\/uploads\/2018\/11\/botnet-interaction.jpg 798w, \/wp-content\/uploads\/2018\/11\/botnet-interaction-300x230.jpg 300w, \/wp-content\/uploads\/2018\/11\/botnet-interaction-768x588.jpg 768w\">\r\n\r\nLooking ahead, we should note that ports 5431 and 1900 were not chosen at random, as the UPnP service usually runs on these ports. This means that this service, which is enabled by default on most devices, has a vulnerability. We will look at the list of devices later.\r\n\r\nFor a long time, experts were unable to detect this problem. The problem boiled down to getting the honeypot (a resource that <a href=\"https:\/\/en.wikipedia.org\/wiki\/Honeypot_(computing)\" rel=\"nofollow\">acts as bait for attackers<\/a>) to mimic a device in the scenario described above. It was only in October 2018, after a long configuration process, that they succeeded in doing so and successfully tricked the botnet. The project was named BCMUPnP_Hunter.\r\n\r\nFurther research showed that the botnet has the following characteristics:\r\n<ul>\r\n \t<li>The number of infections is very high, with approximately 100,000 active scanning IP addresses in each event.<\/li>\r\n \t<li>The target of the infection is mainly router equipment with the BroadCom UPnP function enabled.<\/li>\r\n \t<li>The attacker\u2019s server sends emails through this botnet, which is essentially a proxy server. Currently, requests to well-known mail servers such as Outlook, Hotmail, Yahoo! Mail, etc. are being recorded. Researchers believe that the attackers\u2019 goal is to send spam.<\/li>\r\n<\/ul>\r\nThe frequency and number of scanning nodes can be seen in the graph below.\r\n\r\n<noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/2018\/11\/nodes_scanning.png\" alt=\"nodes scanning\" width=\"100%\" height=\"auto\" class=\"alignnone size-full wp-image-13320\" srcset=\"\/wp-content\/uploads\/2018\/11\/nodes_scanning.png 728w, \/wp-content\/uploads\/2018\/11\/nodes_scanning-300x200.png 300w\" sizes=\"(max-width: 728px) 100vw, 728px\"><\/noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/2018\/11\/nodes_scanning.png\" alt=\"nodes scanning\" width=\"100%\" height=\"auto\" class=\"alignnone size-full wp-image-13320 lazyload\" sizes=\"(max-width: 728px) 100vw, 728px\" data-src=\"\/wp-content\/uploads\/2018\/11\/nodes_scanning.png\" data-srcset=\"\/wp-content\/uploads\/2018\/11\/nodes_scanning.png 728w, \/wp-content\/uploads\/2018\/11\/nodes_scanning-300x200.png 300w\">\r\n\r\nAs can be seen, activity increases every 1-3 days and in some cases reaches 100,000 nodes. The total number of attacking nodes is about 3.34 million, but it should not be ruled out that the same devices may have different IP addresses.\r\n\r\nThe geographical location of the sniffers is shown on the map.\r\n\r\n<noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/2018\/11\/sniffers_location.png\" alt=\"sniffers location\" width=\"100%\" height=\"auto\" class=\"alignnone size-full wp-image-13321\" srcset=\"\/wp-content\/uploads\/2018\/11\/sniffers_location.png 1600w, \/wp-content\/uploads\/2018\/11\/sniffers_location-300x150.png 300w, \/wp-content\/uploads\/2018\/11\/sniffers_location-1024x511.png 1024w, \/wp-content\/uploads\/2018\/11\/sniffers_location-768x384.png 768w, \/wp-content\/uploads\/2018\/11\/sniffers_location-1536x767.png 1536w\" sizes=\"(max-width: 1600px) 100vw, 1600px\"><\/noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/2018\/11\/sniffers_location.png\" alt=\"sniffers location\" width=\"100%\" height=\"auto\" class=\"alignnone size-full wp-image-13321 lazyload\" sizes=\"(max-width: 1600px) 100vw, 1600px\" data-src=\"\/wp-content\/uploads\/2018\/11\/sniffers_location.png\" data-srcset=\"\/wp-content\/uploads\/2018\/11\/sniffers_location.png 1600w, \/wp-content\/uploads\/2018\/11\/sniffers_location-300x150.png 300w, \/wp-content\/uploads\/2018\/11\/sniffers_location-1024x511.png 1024w, \/wp-content\/uploads\/2018\/11\/sniffers_location-768x384.png 768w, \/wp-content\/uploads\/2018\/11\/sniffers_location-1536x767.png 1536w\">\r\n\r\nIndia leads the way with 147,700 nodes, followed by the US and China.\r\n\r\nThe list of vulnerable devices includes many popular brands such as Cisco, Zyxel, D-Link, Eltex, and TP-Link. In total, there are about 116 devices, but researchers note that this number may be higher. The full list is provided below.\r\n\r\nThe consequences are obvious: 100% of the provider\u2019s IP addresses are blacklisted by anti-spam services.\r\n\r\nIt is interesting to note that a large proportion of vulnerable devices are ADSL routers. This is probably a coincidence, but it should not be forgotten that xDSL is still used in many developing countries with large populations.\r\n\r\n<a href=\"\/products\/stingray\/\">Stingray<\/a> provides protection against DDoS attacks, and the new version features a <a href=\"\/products\/stingray\/mini-firewall\/\">mini-Firewall function<\/a>, which we will describe in detail in our blog soon. For more detailed information about the advantages of the platform, its effective use in telecommunications networks, as well as migration from other platforms and integration with other systems, please contact the specialists at VAS Experts, the developer and supplier of the Stingray Service Gateway traffic analysis system.\r\n\r\n[subscription id=\u201d11987\u2033]Subscribe to updates on our blog to stay up to date with the latest news in the telecommunications sector.[\/subscription]\r\n\r\n<span class=\"h3-style\">Complete list of vulnerable devices<\/span>\r\n<em>ADB Broadband S.p.A, \u00a0\u00a0\u00a0HomeStation ADSL Router\u00a0<\/em>\r\n<em>ADB Broadband, \u00a0\u00a0\u00a0ADB ADSL Router\u00a0<\/em>\r\n<em>ADBB, \u00a0\u00a0\u00a0ADB ADSL Router \u00a0<\/em>\r\n<em>ALSiTEC, \u00a0\u00a0\u00a0Broadcom ADSL Router \u00a0<\/em>\r\n<em>ASB, \u00a0\u00a0\u00a0ADSL Router \u00a0<\/em>\r\n<em>ASB, \u00a0\u00a0\u00a0ChinaNet EPON Router \u00a0<\/em>\r\n<em>ASB, \u00a0\u00a0\u00a0ChinaTelecom E8C(EPON) Gateway \u00a0<\/em>\r\n<em>Actiontec, \u00a0\u00a0\u00a0Actiontec GT784WN \u00a0<\/em>\r\n<em>Actiontec, \u00a0\u00a0\u00a0Verizon ADSL Router \u00a0<\/em>\r\n<em>BEC Technologies Inc., \u00a0\u00a0\u00a0Broadcom ADSL Router\u00a0<\/em>\r\n<em>Best IT World India Pvt. Ltd., \u00a0\u00a0\u00a0150M Wireless-N ADSL2+ Router\u00a0<\/em>\r\n<em>Best IT World India Pvt. Ltd., \u00a0\u00a0\u00a0iB-WRA300N\u00a0<\/em>\r\n<em>Billion Electric Co., Ltd., \u00a0\u00a0\u00a0ADSL2+ Firewall Router\u00a0<\/em>\r\n<em>Billion Electric Co., Ltd., \u00a0\u00a0\u00a0BiPAC 7800NXL\u00a0<\/em>\r\n<em>Billion, \u00a0\u00a0\u00a0BiPAC 7700N\u00a0<\/em>\r\n<em>Billion, \u00a0\u00a0\u00a0BiPAC 7700N R2 \u00a0<\/em>\r\n<em>Binatone Telecommunication, \u00a0\u00a0\u00a0Broadcom LAN Router\u00a0<\/em>\r\n<em>Broadcom, \u00a0\u00a0\u00a0ADSL Router\u00a0<\/em>\r\n<em>Broadcom, \u00a0\u00a0\u00a0ADSL2+ 11n WiFi CPE \u00a0<\/em>\r\n<em>Broadcom, \u00a0\u00a0\u00a0Broadcom\u00a0 Router \u00a0<\/em>\r\n<em>Broadcom, \u00a0\u00a0\u00a0Broadcom ADSL Router \u00a0<\/em>\r\n<em>Broadcom, \u00a0\u00a0\u00a0D-Link DSL-2640B \u00a0<\/em>\r\n<em>Broadcom, \u00a0\u00a0\u00a0D-link ADSL Router \u00a0<\/em>\r\n<em>Broadcom, \u00a0\u00a0\u00a0DLink ADSL Router \u00a0<\/em>\r\n<em>ClearAccess, \u00a0\u00a0\u00a0Broadcom ADSL Router \u00a0<\/em>\r\n<em>Comtrend, \u00a0\u00a0\u00a0AR-5383n\u00a0<\/em>\r\n<em>Comtrend, \u00a0\u00a0\u00a0Broadcom ADSL Router \u00a0<\/em>\r\n<em>Comtrend, \u00a0\u00a0\u00a0Comtrend single-chip ADSL router \u00a0<\/em>\r\n<em>D-Link Corporation., \u00a0\u00a0\u00a0D-Link DSL-2640B\u00a0<\/em>\r\n<em>D-Link Corporation., \u00a0\u00a0\u00a0D-Link DSL-2641B\u00a0<\/em>\r\n<em>D-Link Corporation., \u00a0\u00a0\u00a0D-Link DSL-2740B\u00a0<\/em>\r\n<em>D-Link Corporation., \u00a0\u00a0\u00a0D-Link DSL-2750B\u00a0<\/em>\r\n<em>D-Link Corporation., \u00a0\u00a0\u00a0D-LinkDSL-2640B\u00a0<\/em>\r\n<em>D-Link Corporation., \u00a0\u00a0\u00a0D-LinkDSL-2641B\u00a0<\/em>\r\n<em>D-Link Corporation., \u00a0\u00a0\u00a0D-LinkDSL-2741B\u00a0<\/em>\r\n<em>D-Link Corporation., \u00a0\u00a0\u00a0DSL-2640B\u00a0<\/em>\r\n<em>D-Link, \u00a0\u00a0\u00a0ADSL 4*FE 11n Router \u00a0<\/em>\r\n<em>D-Link, \u00a0\u00a0\u00a0D-Link ADSL Router \u00a0<\/em>\r\n<em>D-Link, \u00a0\u00a0\u00a0D-Link DSL-2640U \u00a0<\/em>\r\n<em>D-Link, \u00a0\u00a0\u00a0D-Link DSL-2730B \u00a0<\/em>\r\n<em>D-Link, \u00a0\u00a0\u00a0D-Link DSL-2730U \u00a0<\/em>\r\n<em>D-Link, \u00a0\u00a0\u00a0D-Link DSL-2750B \u00a0<\/em>\r\n<em>D-Link, \u00a0\u00a0\u00a0D-Link DSL-2750U \u00a0<\/em>\r\n<em>D-Link, \u00a0\u00a0\u00a0D-Link DSL-6751 \u00a0<\/em>\r\n<em>D-Link, \u00a0\u00a0\u00a0D-Link DSL2750U \u00a0<\/em>\r\n<em>D-Link, \u00a0\u00a0\u00a0D-Link Router \u00a0<\/em>\r\n<em>D-Link, \u00a0\u00a0\u00a0D-link ADSL Router \u00a0<\/em>\r\n<em>D-Link, \u00a0\u00a0\u00a0DVA-G3672B-LTT Networks ADSL Router \u00a0<\/em>\r\n<em>DARE, \u00a0\u00a0\u00a0Dare router \u00a0<\/em>\r\n<em>DLink, \u00a0\u00a0\u00a0D-Link DSL-2730B \u00a0<\/em>\r\n<em>DLink, \u00a0\u00a0\u00a0D-Link VDSL Router \u00a0<\/em>\r\n<em>DLink, \u00a0\u00a0\u00a0DLink ADSL Router \u00a0<\/em>\r\n<em>DQ Technology, Inc., \u00a0\u00a0\u00a0ADSL2+ 11n WiFi CPE\u00a0<\/em>\r\n<em>DQ Technology, Inc., \u00a0\u00a0\u00a0Broadcom ADSL Router\u00a0<\/em>\r\n<em>DSL, \u00a0\u00a0\u00a0ADSL Router \u00a0<\/em>\r\n<em>DareGlobal, \u00a0\u00a0\u00a0D-Link ADSL Router \u00a0<\/em>\r\n<em>Digicom S.p.A., \u00a0\u00a0\u00a0ADSL Wireless Modem\/Router \u00a0<\/em>\r\n<em>Digicom S.p.A., \u00a0\u00a0\u00a0RAW300C-T03\u00a0<\/em>\r\n<em>Dlink, \u00a0\u00a0\u00a0D-Link DSL-225 \u00a0<\/em>\r\n<em>Eltex, \u00a0\u00a0\u00a0Broadcom ADSL Router \u00a0<\/em>\r\n<em>FiberHome, \u00a0\u00a0\u00a0Broadcom ADSL Router \u00a0<\/em>\r\n<em>GWD, \u00a0\u00a0\u00a0ChinaTelecom E8C(EPON) Gateway \u00a0<\/em>\r\n<em>Genew, \u00a0\u00a0\u00a0Broadcom ADSL Router \u00a0<\/em>\r\n<em>INTEX, \u00a0\u00a0\u00a0W150D\u00a0<\/em>\r\n<em>INTEX, \u00a0\u00a0\u00a0W300D\u00a0<\/em>\r\n<em>INTEX, \u00a0\u00a0\u00a0Wireless N 150 ADSL2+ Modem Router \u00a0<\/em>\r\n<em>INTEX, \u00a0\u00a0\u00a0Wireless N 300 ADSL2+ Modem Router \u00a0<\/em>\r\n<em>ITI Ltd., \u00a0\u00a0\u00a0ITI Ltd.ADSL2Plus Modem\/Router \u00a0<\/em>\r\n<em>Inteno, \u00a0\u00a0\u00a0Broadcom ADSL Router \u00a0<\/em>\r\n<em>Intercross, \u00a0\u00a0\u00a0Broadcom ADSL Router \u00a0<\/em>\r\n<em>IskraTEL, \u00a0\u00a0\u00a0Broadcom ADSL Router \u00a0<\/em>\r\n<em>Kasda, \u00a0\u00a0\u00a0Broadcom ADSL Router \u00a0<\/em>\r\n<em>Link-One, \u00a0\u00a0\u00a0Modem Roteador Wireless N ADSL2+ 150 Mbps \u00a0<\/em>\r\n<em>Linksys, \u00a0\u00a0\u00a0Cisco X1000\u00a0<\/em>\r\n<em>Linksys, \u00a0\u00a0\u00a0Cisco X3500\u00a0<\/em>\r\n<em>NB, \u00a0\u00a0\u00a0DSL-2740B \u00a0<\/em>\r\n<em>NetComm Wireless Limited, \u00a0\u00a0\u00a0NetComm ADSL2+ Wireless Router \u00a0<\/em>\r\n<em>NetComm, \u00a0\u00a0\u00a0NetComm ADSL2+ Wireless Router \u00a0<\/em>\r\n<em>NetComm, \u00a0\u00a0\u00a0NetComm WiFi Data and VoIP Gateway<\/em>\r\n<em>OPTICOM, \u00a0\u00a0\u00a0DSLink 279\u00a0<\/em>\r\n<em>Opticom, \u00a0\u00a0\u00a0DSLink 485\u00a0<\/em>\r\n<em>Orcon, \u00a0\u00a0\u00a0Genius\u00a0<\/em>\r\n<em>QTECH, \u00a0\u00a0\u00a0QTECH\u00a0<\/em>\r\n<em>Raisecom, \u00a0\u00a0\u00a0Broadcom ADSL Router \u00a0<\/em>\r\n<em>Ramptel, \u00a0\u00a0\u00a0300Mbps ADSL Wireless-N Router \u00a0<\/em>\r\n<em>Router, \u00a0\u00a0\u00a0ADSL2+ Router \u00a0<\/em>\r\n<em>SCTY, \u00a0\u00a0\u00a0TYKH PON Router \u00a0<\/em>\r\n<em>Star-Net, \u00a0\u00a0\u00a0Broadcom ADSL Router \u00a0<\/em>\r\n<em>Starbridge Networks, \u00a0\u00a0\u00a0Broadcom ADSL Router\u00a0<\/em>\r\n<em>TP-LINK Technologies Co., Ltd, \u00a0\u00a0\u00a0300Mbps Wireless N ADSL2+ Modem Router \u00a0<\/em>\r\n<em>TP-LINK Technologies Co., Ltd, \u00a0\u00a0\u00a0300Mbps Wireless N USB ADSL2+ Modem Router \u00a0<\/em>\r\n<em>TP-LINK, \u00a0\u00a0\u00a0TP-LINK Wireless ADSL2+ Modem Router \u00a0<\/em>\r\n<em>TP-LINK, \u00a0\u00a0\u00a0TP-LINK Wireless ADSL2+ Router \u00a0<\/em>\r\n<em>Technicolor, \u00a0\u00a0\u00a0CenturyLink TR-064 v4.0 \u00a0<\/em>\r\n<em>Tenda, \u00a0\u00a0\u00a0Tenda ADSL2+ WIFI MODEM \u00a0<\/em>\r\n<em>Tenda, \u00a0\u00a0\u00a0Tenda ADSL2+ WIFI Router \u00a0<\/em>\r\n<em>Tenda, \u00a0\u00a0\u00a0Tenda Gateway \u00a0<\/em>\r\n<em>Tenda\/Imex, \u00a0\u00a0\u00a0ADSL2+ WIFI-MODEM WITH 3G\/4G USB PORT \u00a0<\/em>\r\n<em>Tenda\/Imex, \u00a0\u00a0\u00a0ADSL2+ WIFI-MODEM WITH EVO SUPPORT \u00a0<\/em>\r\n<em>UTStarcom Inc., \u00a0\u00a0\u00a0UTStarcom ADSL2+ Modem Router \u00a0<\/em>\r\n<em>UTStarcom Inc., \u00a0\u00a0\u00a0UTStarcom ADSL2+ Modem\/Wireless Router \u00a0<\/em>\r\n<em>UniqueNet Solutions, \u00a0\u00a0\u00a0WLAN N300 ADSL2+ Modem Router \u00a0<\/em>\r\n<em>ZTE, \u00a0\u00a0\u00a0Broadcom ADSL Router \u00a0<\/em>\r\n<em>ZTE, \u00a0\u00a0\u00a0ONU Router \u00a0<\/em>\r\n<em>ZYXEL, \u00a0\u00a0\u00a0ZyXEL VDSL Router \u00a0<\/em>\r\n<em>Zhone, \u00a0\u00a0\u00a0Broadcom ADSL Router \u00a0<\/em>\r\n<em>Zhone, \u00a0\u00a0\u00a0Zhone Wireless Gateway \u00a0<\/em>\r\n<em>Zoom, \u00a0\u00a0\u00a0Zoom Adsl Modem\/Router \u00a0<\/em>\r\n<em>ZyXEL, \u00a0\u00a0\u00a0CenturyLink UPnP v1.0 \u00a0<\/em>\r\n<em>ZyXEL, \u00a0\u00a0\u00a0P-660HN-51 \u00a0<\/em>\r\n<em>ZyXEL, \u00a0\u00a0\u00a0ZyXEL xDSL Router \u00a0<\/em>\r\n<em>huaqin, \u00a0\u00a0\u00a0HGU210 v3 Router \u00a0<\/em>\r\n<em>iBall Baton, \u00a0\u00a0\u00a0iBall Baton 150M Wireless-N ADSL2+ Router \u00a0<\/em>\r\n<em>iiNet Limited, \u00a0\u00a0\u00a0BudiiLite\u00a0<\/em>\r\n<em>iiNet, \u00a0\u00a0\u00a0BoB2\u00a0<\/em>\r\n<em>iiNet, \u00a0\u00a0\u00a0BoBLite\u00a0<\/em>","protected":false},"excerpt":{"rendered":"<p>Since September 2018, 360Netlab Scanmon has detected multiple spikes in scanning activity on TCP port 5431. Readings were recorded each time the number of connections (scanning attempts) exceeded 100,000.<\/p>\n","protected":false},"author":7,"featured_media":13317,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[110,48],"tags":[],"class_list":["post-13315","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","category-telecom"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>VAS Experts<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/vasexperts.com\/blog\/security\/the-botnet-spams-via-routers\/\",\"url\":\"https:\/\/vasexperts.com\/blog\/security\/the-botnet-spams-via-routers\/\",\"name\":\"Spams de botnets atrav\u00e9s de roteadores: prote\u00e7\u00e3o de rede contra ataques DDoS\",\"isPartOf\":{\"@id\":\"https:\/\/vasexperts.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/vasexperts.com\/blog\/security\/the-botnet-spams-via-routers\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/vasexperts.com\/blog\/security\/the-botnet-spams-via-routers\/#primaryimage\"},\"thumbnailUrl\":\"\/wp-content\/uploads\/2025\/09\/bot_router.jpg\",\"datePublished\":\"2018-11-26T15:25:53+00:00\",\"dateModified\":\"2025-09-09T12:07:38+00:00\",\"author\":{\"@id\":\"https:\/\/vasexperts.com\/#\/schema\/person\/f4edcaef26fe49b6b59baf8ac5b62170\"},\"description\":\"A intera\u00e7\u00e3o entre uma botnet e uma \\\"v\u00edtima\\\", resultando na transforma\u00e7\u00e3o do dispositivo em um bot que executa as tarefas da botnet prim\u00e1ria.\",\"breadcrumb\":{\"@id\":\"https:\/\/vasexperts.com\/blog\/security\/the-botnet-spams-via-routers\/#breadcrumb\"},\"inLanguage\":\"br-PT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/vasexperts.com\/blog\/security\/the-botnet-spams-via-routers\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"br-PT\",\"@id\":\"https:\/\/vasexperts.com\/blog\/security\/the-botnet-spams-via-routers\/#primaryimage\",\"url\":\"\/wp-content\/uploads\/2025\/09\/bot_router.jpg\",\"contentUrl\":\"\/wp-content\/uploads\/2025\/09\/bot_router.jpg\",\"width\":1278,\"height\":852,\"caption\":\"botnet router\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/vasexperts.com\/blog\/security\/the-botnet-spams-via-routers\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\",\"item\":\"https:\/\/vasexperts.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The botnet spams via routers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/vasexperts.com\/#website\",\"url\":\"https:\/\/vasexperts.com\/\",\"name\":\"VAS Experts\",\"description\":\"VAS Experts\",\"inLanguage\":\"br-PT\",\"publisher\":{\"@id\":\"https:\/\/vasexperts.com\/#organization\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/vasexperts.com\/#\/schema\/person\/f4edcaef26fe49b6b59baf8ac5b62170\",\"name\":\"Elena Rudich\",\"url\":\"https:\/\/vasexperts.com\/br\/blog\/author\/elena-rudich\/\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/vasexperts.com\/#organization\",\"name\":\"VAS Experts\",\"url\":\"https:\/\/vasexperts.com\/\",\"logo\":\"https:\/\/vasexperts.com\/assets\/img\/svg\/logo.svg\",\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/vas-experts\",\"https:\/\/www.youtube.com\/channel\/UCGYfhhZvmE2XbrCyerzRbGA\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"VAS Experts","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/vasexperts.com\/blog\/security\/the-botnet-spams-via-routers\/","url":"https:\/\/vasexperts.com\/blog\/security\/the-botnet-spams-via-routers\/","name":"Spams de botnets atrav\u00e9s de roteadores: prote\u00e7\u00e3o de rede contra ataques DDoS","isPartOf":{"@id":"https:\/\/vasexperts.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/vasexperts.com\/blog\/security\/the-botnet-spams-via-routers\/#primaryimage"},"image":{"@id":"https:\/\/vasexperts.com\/blog\/security\/the-botnet-spams-via-routers\/#primaryimage"},"thumbnailUrl":"\/wp-content\/uploads\/2025\/09\/bot_router.jpg","datePublished":"2018-11-26T15:25:53+00:00","dateModified":"2025-09-09T12:07:38+00:00","author":{"@id":"https:\/\/vasexperts.com\/#\/schema\/person\/f4edcaef26fe49b6b59baf8ac5b62170"},"description":"A intera\u00e7\u00e3o entre uma botnet e uma \"v\u00edtima\", resultando na transforma\u00e7\u00e3o do dispositivo em um bot que executa as tarefas da botnet prim\u00e1ria.","breadcrumb":{"@id":"https:\/\/vasexperts.com\/blog\/security\/the-botnet-spams-via-routers\/#breadcrumb"},"inLanguage":"br-PT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/vasexperts.com\/blog\/security\/the-botnet-spams-via-routers\/"]}]},{"@type":"ImageObject","inLanguage":"br-PT","@id":"https:\/\/vasexperts.com\/blog\/security\/the-botnet-spams-via-routers\/#primaryimage","url":"\/wp-content\/uploads\/2025\/09\/bot_router.jpg","contentUrl":"\/wp-content\/uploads\/2025\/09\/bot_router.jpg","width":1278,"height":852,"caption":"botnet router"},{"@type":"BreadcrumbList","@id":"https:\/\/vasexperts.com\/blog\/security\/the-botnet-spams-via-routers\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430","item":"https:\/\/vasexperts.com\/"},{"@type":"ListItem","position":2,"name":"The botnet spams via routers"}]},{"@type":"WebSite","@id":"https:\/\/vasexperts.com\/#website","url":"https:\/\/vasexperts.com\/","name":"VAS Experts","description":"VAS Experts","inLanguage":"br-PT","publisher":{"@id":"https:\/\/vasexperts.com\/#organization"}},{"@type":"Person","@id":"https:\/\/vasexperts.com\/#\/schema\/person\/f4edcaef26fe49b6b59baf8ac5b62170","name":"Elena Rudich","url":"https:\/\/vasexperts.com\/br\/blog\/author\/elena-rudich\/"},{"@type":"Organization","@id":"https:\/\/vasexperts.com\/#organization","name":"VAS Experts","url":"https:\/\/vasexperts.com\/","logo":"https:\/\/vasexperts.com\/assets\/img\/svg\/logo.svg","sameAs":["https:\/\/www.linkedin.com\/company\/vas-experts","https:\/\/www.youtube.com\/channel\/UCGYfhhZvmE2XbrCyerzRbGA"]}]}},"_links":{"self":[{"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/posts\/13315"}],"collection":[{"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/comments?post=13315"}],"version-history":[{"count":6,"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/posts\/13315\/revisions"}],"predecessor-version":[{"id":13328,"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/posts\/13315\/revisions\/13328"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/media\/13317"}],"wp:attachment":[{"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/media?parent=13315"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/categories?post=13315"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/tags?post=13315"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}