GoKawiilHackers exploit D-Link, Ubiquiti and SAP flaws to sell victims' bandwidth
Researchers cited by BleepingComputer found attackers exploiting known vulnerabilities in D-Link ShareCenter NAS, Ubiquiti UniFi Video NVR, and SAP NetWeaver Visual Composer to install the Pawns.app bandwidth-sharing software on compromised devices. Hikvision and Dahua DVR/NVR units were also targeted, though the exact flaws used weren't identified, and in some cases attackers set up SSH key authentication to retain persistent access.