VERY IMPORTANT

Researchers at Lumen Black Lotus Labs have identified a never-before-seen campaign involving compromised routers. This is a complex campaign that they have called “Hiatus”. It infects business-grade routers and deploys two malicious binaries, including a Remote Access Trojan (RAT) called HiatusRAT, and a variant of tcpdump that enables packet capture on the target device.