Arystinger

threat-intelligence 2026-06-22
AryStinger Turns 4,300 End-of-Life Routers Into a Reconnaissance Proxy Network
QiAnXin XLab's AryStinger has hijacked 4,300+ legacy Realtek RTL819X routers — mostly D-Link DIR-850L — into a pre-intrusion recon and proxy mesh using decade-old CVEs.
arystinger botnet d-link realtek qnap orb-network router-security reconnaissance

AryStinger Turns 4,300 End-of-Life Routers Into a Reconnaissance Proxy Network