Horse ShellMalware
Checkpoint Research describes this as part of a custom firmware image affiliated with the Chinese state-sponsored actor “Camaro Dragon”, a custom MIPS32 ELF implant. HorseShell, the main implant inserted into the modified firmware by the attackers, provides the attacker with 3 main functionalities: * Remote shell: Execution of arbitrary shell commands on the infected router * File transfer…From MISP Galaxy
Last reported 15 days ago, by The Hacker News1 report
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
TP-Link Sued by Four More U.S. States Over Router Security and China Ties“The one backdoor they name, Horse Shell, was placed on TP-Link routers by a Chinese state-backed hacking group, according to Check Point Research, which the complaints cite.”
Thanks — we review every report.