Malware
AVrecon
AVrecon is a Linux-based Remote Access Trojan (RAT) targeting small-office/home-office (SOHO) routers and other ARM-embedded devices.
AVrecon is a Linux malware family.
Background
AVrecon is a Linux Remote Access Trojan (RAT) built to compromise small-office/home-office (SOHO) routers along with other ARM-embedded hardware. Operators spread it by abusing unpatched flaws or frequent misconfigurations on the devices they target. After installation, the malware gathers details about the host, connects to a predefined C&C server, and launches a remote shell so attackers can run commands; it can additionally fetch and execute arbitrary files. Recent campaigns have leveraged AVrecon for ad-fraud schemes, password spraying, and data exfiltration.
Source: Malpedia (Fraunhofer FKIE).