What we know
The authors present a long-term investigation of attacks targeting MikroTik routers, using a highly interactive honeypot deployed across six countries. According to the abstract, they collected over 44 million packets over 120 days, classifying traffic by known CVEs to identify activities such as cryptocurrency mining, DNS server redirection, and eavesdropping tunnels.
Evidence limits
This entry is based solely on the published title and abstract; the full text has not been reviewed and findings have not been independently verified.
Reviewed: author abstract. Full-text results were not analyzed.
Sources and provenance
- Characterising attacks targeting low-cost routers: a MikroTik case study (Extended)
abstract · 2026-10-04
Reviewed: 2026-10-04. This record may change when new evidence is found.