[nsp-sec] dlink router worm or dlink compromise leads to infectedPCs?

[Sean Donelan]

On Sat, 22 Mar 2008, Rob Thomas wrote:
> The bot is based at least partially on rxbot and it runs natively on
> the compromised Dlink routers.  The Dlink routers supposedly run
> Busybox.

>From the information you've found, does it appear to be something
Dlink specific the miscreant is using or may it affect other devices
(multiple brands of routers, appliances, etc) that include the BusyBox 
code?

See this link for appliances known to use BusyBox embedded code:
http://en.wikipedia.org/wiki/BusyBox

Just trying to distinguish between Dlink and BusyBox in your previous
report, and make sure I'm worried about the correct thing.

Thanks,
Sean Donelan
Akamai