More than 20 models of Zbtlink routers reportedly contain a hidden backdoor that could allow remote access to the networks they serve, cybersecurity researchers have warned.
The affected devices are sold worldwide under the Zbtlink and Wiflyer brands. VulnCheck estimates that at least 100,000 of the routers have been deployed in homes, small businesses, and office environments.
Researchers say the backdoor could allow whoever controls it to take over an affected router and potentially access other devices connected to the same network.
The finding adds to continuing concerns in Western countries about security risks linked to foreign-made networking equipment.
Researchers Name the Router Backdoor “Endlessdoors”
Jacob Baines, chief technology officer at cybersecurity company VulnCheck, discovered the previously unreported backdoor. He named it “Endlessdoors.”
According to Baines, the backdoor is included in multiple Zbtlink routers and communicates automatically with a specific IP address and a domain registered in China.
The devices reportedly contact that infrastructure every 35 seconds without the owner’s knowledge.
If an attacker controls the destination infrastructure, they could potentially gain control of the router. From there, they may be able to move through the local network and reach other connected systems.
That could place personal devices, business systems, and sensitive data at risk.
Baines said many people using these routers at home or in a small office would have no idea that the device could provide this level of access.
He warned that an affected router installed in a research lab, for example, could give an outside party a route into the wider network.
Reuters could not determine why the backdoor exists, what purpose it may serve, or whether it has ever been exploited.
Zbtlink had not responded to a request for comment at the time of publication.
Zbtlink Routers Could Put Connected Devices at Risk
Routers sit at the centre of a network and manage communications between connected devices and the internet. As a result, a compromised router can create serious security risks.
An attacker with control over a vulnerable device may be able to monitor network traffic, target other devices, redirect users to malicious websites, or establish long-term access to a network.
Security experts have repeatedly warned that small office and home office routers can become entry points for wider intrusion campaigns.
Government agencies in Western countries have also raised concerns about Chinese-linked hackers using internet-connected devices for cyberespionage and future attacks. China has regularly denied conducting or supporting cyberattacks.
Foreign-Made Routers Face Growing Scrutiny
The discovery comes as US regulators take a closer look at the security of foreign-made consumer networking devices.
In March, the Federal Communications Commission announced plans to restrict imports of new foreign-made consumer routers over national security concerns. The agency later exempted many non-Chinese companies.
Earlier this year, Texas sued TP-Link, a California-based router manufacturer that had been spun off from a Chinese company. The state alleged that the company gave Beijing access to American consumer devices, an accusation TP-Link disputed.
The Zbtlink case does not establish why the reported backdoor was included in the routers. However, it highlights why consumers and businesses should treat network equipment as a critical security asset.
Users of affected Zbtlink routers should review VulnCheck’s findings, check whether their model is listed, and consider replacing the device or isolating it from sensitive systems until further information becomes available.
0 responses to “Zbtlink Routers Contain Backdoor, Researchers Warn”