Security researchers at Akamai have discovered a proxy botnet composed of more than 65,000 routers exposed to the Internet via the Universal Plug and Play (UPnP) protocol. Crooks have compromised the devices to conduct a wide range of malicious activities, including spamming and phishing, click fraud, account takeover and credit card fraud, distributed denial of service (DDoS) attacks, malware distribution, and also bypassing censorship, researchers at Symantec say. The proxybotnet is composed of vulnerable devices including malicious NAT injections that allow attackers to abuse them.”]
Source: https://securityaffairs.co/wordpress/71338/breaking-news/proxy-botnet-upnp.html