PolarEdge Botnet Exploits Cisco and Other Flaws to Hijack ASUS, QNAP, and Synology Devices

A new malware campaign, PolarEdge, is exploiting vulnerabilities in Cisco, ASUS, QNAP, and Synology devices to create a botnet. The botnet, active since late 2023, uses a TLS backdoor to gain control of devices, potentially for launching cyber attacks. SecurityScorecard also revealed a separate botnet targeting Microsoft 365 accounts using stolen credentials and exploiting non-interactive sign-ins.