Zbtlink routers sold in global markets have been found carrying a hidden remote-control implant that starts with the device.
The implant, called ENDLESSDOORS, does not rely on a victim clicking a link or an attacker breaking into a router.
It calls out from the router to external infrastructure and waits for instructions, meaning
ordinary firewall rules may not stop the connection.
The finding matters because routers sit between users and the internet.
A hostile operator could use that position to inspect traffic, move deeper into a local network, change settings, or install further tools.
20+ Zbtlink router models shipped with the ENDLESSDOORS implant, enabling hidden remote control through outbound connections.
cybersecuritynews.com