Cybersecurity researchers have found surveillance backdoors in Chinese carrier routers made by Zbtlink and the same software in a different Zbtlink-made router sold through Amazon.
Chinese law requires telecom and internet companies to provide technical assistance to police and state-security agencies.
In an Aug. 27 report, cybersecurity firm VulnCheck said it found two hidden programs in an $88 router bought through Amazon from a U.S. seller. One, which the researchers named Speakingstone, sends information about the router to a remote server and can receive instructions to redirect internet traffic, obtain login credentials, or take control of the device.
The second, named Darklantern, can allow someone on the internet to take control of an affected router without a password, VulnCheck said….