A 13,000-router MikroTik botnet bypasses SPF protections on 20,000 domains, fueling malware, DDoS, and phishing.
  • 𝕸𝖔𝖘𝖘@infosec.pubEnglish
    4·
    12 hours ago

    Looks to stem from default creds and SPF+all, both of which are amateur hour. In their defense, devices should not allow keeping default creds, and SPF should have never implemented the +all tag. Still, though. It’s 2025, not 2005. They should have known.