Proxyjacking campaign hijacks D-Link and Ubiquiti devices across 34 countries

Fri, 16 Oct 2026 15:21:49 +0000

Engineer — Learn: Proxyjacking targeting SOHO/edge devices is a useful technique reminder — if your environment includes Ubiquiti (common in SMBs), audit for unusual outbound connections to proxy networks, but no CVEs or patches are identified in this report.
SOC/IR — Learn: Proxyjacking as a monetization TTP is worth adding to threat model awareness, but the summary provides no IOCs or ATT&CK-mappable behaviors to build detections from right now.
Leader — Skip

Soho-Devices on CuraSec