Hackers hijack D-Link, Ubiquiti devices to resell stolen bandwidth
Proxyjacking campaign compromises network devices across 34 countries
Key Takeaways
- Proxyjacking campaign targets D-Link and Ubiquiti network devices globally
- Affected devices across 34 countries are repurposed as residential proxy nodes
- Victims' internet bandwidth is monetized by threat actors without consent
- Specific exploitation vectors and compromise extent remain unverified
- General security recommendations apply: strong passwords, firmware updates, traffic monitoring
Quick answers
- What happened?
- A proxyjacking campaign has compromised D-Link and Ubiquiti network devices in 34 countries, repurposing them as residential proxy nodes to monetize victims' internet connections. The operation, attributed to unknown threat actors, has impacted devices globally, though specific exploitation vectors and the extent of compromise remain under investigation.
- What should defenders do?
- Secure network devices with strong passwords, update firmware to the latest version, and monitor for unusual outbound traffic. No specific patch was mentioned in the reported summary.
A proxyjacking campaign has impacted devices manufactured by D-Link and Ubiquiti in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. According to reporting from BleepingComputer, unknown threat actors have hijacked these network devices and repurposed them as proxy nodes to route traffic through victim connections. The exact method by which the devices were compromised—whether through credential stuffing, vulnerability exploitation, or other means—is not detailed in the available summary. The campaign represents a significant privacy and security concern for affected users, as their bandwidth is being resold without consent. No specific patch or mitigation guidance beyond general device security recommendations was provided in the report.
Security Details
Devices are compromised and repurposed as proxy nodes to route traffic through victim connections, monetizing victims' internet bandwidth through a commercial residential proxy network. The specific vulnerability or attack vector used to compromise the devices is unverified from the available summary.
Mitigation
Secure network devices with strong passwords, update firmware to the latest version, and monitor for unusual outbound traffic. No specific patch was mentioned in the reported summary.
Sources
BleepingComputer
Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
Oct 15, 2026 · 18:20
Original link
Related Security News
Fake AI Product Impersonation Campaigns Target US Businesses, ANY.RUN Reports
Between April and October 2026, threat actors impersonated popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN researchers linked 1,258 public sandbox analyses to these campaigns. US businesses were disproportionately targeted, accounting for 16% of country-attributed incidents, which has increased operational pressure on MSSPs serving the region. No specific CVEs or exploit details were disclosed, but the impersonation tactic remains the primary attack vector.
