radar

ONE Sentinel

securitySecurity/THREATS/HIGH

KadNap Malware Infects 14,000+ Edge Devices to Power Stealth Proxy Botnet

sourceThe Hacker News
calendar_todayMarch 10, 2026
schedule1 min read
lightbulb

EXECUTIVE SUMMARY

KadNap Malware Hijacks Over 14,000 Asus Routers for Botnet Operations

Summary

The article discusses the discovery of KadNap malware, which targets Asus routers to create a botnet for proxying malicious traffic. The malware has infected over 14,000 devices, with the majority of victims located in the United States.

Key Points

  • KadNap malware was first detected in August 2025.
  • Over 14,000 devices have been infected, with more than 60% located in the U.S.
  • The primary target of the malware is Asus routers.
  • The discovery was made by Black Lotus Labs, a team within Lumen.
  • The malware is used to create a botnet for proxying malicious traffic.

Analysis

The KadNap malware represents a significant threat as it targets widely-used network devices, specifically Asus routers, to create a botnet. This botnet can be leveraged for various malicious activities, including DDoS attacks and anonymizing malicious traffic. The high infection rate, especially in the U.S., underscores the importance of securing edge devices to prevent such exploitations.

Conclusion

IT professionals should prioritize securing network devices, particularly routers, by ensuring firmware is up-to-date and implementing robust security configurations. Monitoring network traffic for unusual activity can also help in early detection of such threats.