VulnCheck Finds Endlessdoors Backdoor in Chinese-Made Routers

Cybersecurity firm VulnCheck identified a hidden backdoor called Endlessdoors in more than 20 models of wireless routers manufactured by Shenzhen Zhibotong Electronics Co. The affected devices are sold under the Zbtlink and Wiflyer brand names, as well as through various OEM/ODM agreements, with an estimated 100,000 units deployed globally.

Jacob Baines, the company's chief technology officer, explained that the backdoor automatically communicates with specific endpoints. This vulnerability could allow an attacker to seize control of the router and gain access to other devices sharing the same network.

This discovery follows a series of U.S. government actions against Chinese networking equipment. In March, the Federal Communications Commission restricted imports of certain foreign-made routers, linking them to the Volt, Flax, and Salt Typhoon cyberattacks. Additionally, the state of Texas filed a lawsuit in February against TP-Link Systems over allegations of Chinese regime access, a claim the company denies.