China-based researchers say a botnet called “EwDoor” is infecting thousands of AT&T internet subscribers in the U.S., using a critical-severity blind command injection flaw first reported in 2017. The vulnerability, which carries a severity rating of 9.8 out of 10, can be weaponized to allow for user-defined commands. The number of infected devices may be significantly larger, too, as it detected more than 100,000 devices accessing the same certificate used by an infected controller.”]
Source: https://www.govinfosecurity.com/recently-discovered-ewdoor-botnet-targets-us-att-devices-a-18032