ZuoRAT is an advanced malware that infects routers from several vendors. The targeted routers are designed for use in small organizations and home offices. Once the router is infected, attackers use it to further attack connected computers. They install separate malware on these devices through DNS hijacking and HTTP hijacking.

Take Aways:

ZuoRAT takes advantage of old vulnerabilities.

• When looking for a router, make sure it is from a reputable company that regularly makes updates available.
• Patch your router to greatly reduce your chances of getting attacked.

If your router may have been infected, reboot your router to disable ZuoRAT.

• Keep in mind this only disables ZuoRAT. Perform a full factory reset to completely eliminate traces of the infection.
• The computers infected with other malware while connected to the router remain infected. Treat them separately.

Also, talk to your IT provider about network monitoring and management. Tools available to professionals like Frontline Technology often can catch ZouRAT and other malware before it compromises your network.

Want to know more about ZuoRAT?

Get more details from DarkReading’s original post.