[Intel]: https://blog.lumen.com/routers-from-the-underground-exposing-avrecon/

[timb-machine]

Area

Malware reports

Parent threat

Defense Evasion, Credential Access, Discovery, Command and Control

Finding

https://blog.lumen.com/routers-from-the-underground-exposing-avrecon/

Industry reference

attack:T1110.003:Password Spraying
attack:T1057:Process Discovery
attack:T1082:System Information Discovery
attack:T1480.001:Environmental Keying
attack:T1573:Encrypted Channel

Malware reference

AVrecon
#717

Actor reference

No response

Component

Linux, IOT

Scenario

No response