MOON, the strange worm spreading on Linksys routers

Feb. 18, 2014

Researchers at the SANS Institute discovered a new self-replicating worm that is infecting different Linksys home and small business routers. The analysts still haven’t determined whether there is a malicious payload or if the worm connects to a command and control server. SANS alerted spread the alarm, providing a list of potential vulnerable routers depending on the firmware version they’re running. The list includes the following models: E4200 E3200 E3000 E2500 E2100L E2000 E1550 E1500 E1200 E1000 E900