Hackers hijack D-Link, Ubiquiti devices to resell stolen bandwidth

A proxyjacking campaign has compromised devices in 34 countries, installing Pawns.app without owners' consent to monetize their internet connections. GreyNoise identified at least 143 compromised devices, exploiting flaws in D-Link ShareCenter, Ubiquiti UniFi Video and SAP NetWeaver.

• Campaign hit devices in 34 countries, with 143 victims identified
• Exploited flaws: CVE-2024-3272/3273 in D-Link, CVE-2021-44228 in Ubiquiti
• Pawns.app installed without consent to resell victims' bandwidth
• Attackers set up SSH key access as a backup in some cases