Back to today’s briefing

Story perspectives

Ballista Botnet Compromises 6,000 Routers Globally

3/13/2025

38 3

Summary

Story summary

A dangerous botnet, known as Ballista, is wreaking havoc by exploiting a vulnerability in unpatched TP-Link Archer AX-21 routers. Since its detection in January 2025, it has compromised over 6,000 devices across the U.S., Australia, China, and Mexico. This malware, linked to an Italian hacker, enables remote control and has adapted to use TOR for added secrecy.

1 of 1

Story summary

A dangerous botnet, known as Ballista, is wreaking havoc by exploiting a vulnerability in unpatched TP-Link Archer AX-21 routers. Since its detection in January 2025, it has compromised over 6,000 devices across the U.S., Australia, China, and Mexico. This malware, linked to an Italian hacker, enables remote control and has adapted to use TOR for added secrecy.