Aug 11, 2026, 04:13 AM
Hi everyone, breached comunity 
Security firm VulnCheck discovered a backdoor in Zbtlink routers, affecting more than 20 models. The Chinese manufacturer responded that the code in its firmware was “solely intended for after-sales maintenance,” but later pulled the firmware from its download page citing “firmware security vulnerabilities.”
Researcher Jacob Baines warns that these devices ship with a root-level implant that connects to a hardcoded C2 with no authentication, meaning anyone on the network path could hijack the connection. These routers are sold under the brands ZBT, ZBTWiFi, and Wiflyer on Amazon and Alibaba.
Do you think backdoors “justified as maintenance” should ever be considered acceptable in the industry, or are they simply an open door to abuse and espionage? :alien:
Security firm VulnCheck discovered a backdoor in Zbtlink routers, affecting more than 20 models. The Chinese manufacturer responded that the code in its firmware was “solely intended for after-sales maintenance,” but later pulled the firmware from its download page citing “firmware security vulnerabilities.”
Researcher Jacob Baines warns that these devices ship with a root-level implant that connects to a hardcoded C2 with no authentication, meaning anyone on the network path could hijack the connection. These routers are sold under the brands ZBT, ZBTWiFi, and Wiflyer on Amazon and Alibaba.
Do you think backdoors “justified as maintenance” should ever be considered acceptable in the industry, or are they simply an open door to abuse and espionage? :alien: