Chinese Routers Hide Hidden Surveillance Backdoors

More than a dozen models of Chinese-made Zbtlink routers harbor at least two critical backdoors, "Darklantern" and "Speakingstone," discovered by cybersecurity firm VulnCheck. These vulnerabilities offer invasive remote access, posing significant security risks. Speakingstone, in particular, may allow for the redirection of network traffic and is described as a "surveillance implant."

The newly identified backdoors predate a previously disclosed backdoor named "Endlessdoors." VulnCheck's Jacob Baines emphasized that Zbtlink routers are sold globally under numerous brand names, meaning many organizations may be unaware they are using compromised devices. Baines' investigation into Speakingstone revealed routers attempting to connect to an unregistered domain, which he then registered, uncovering extensive domestic Chinese surveillance activity. Despite these findings, Zbtlink maintains its remote support functions are legitimate and pose no security risks.