>AryStinger exploits older flaws such as CVE-2013-3307, CVE-2016-5681, and CVE-2025-11837, targeting primarily D-Link DIR-850L, D-Link DIR-818LW routers.

https://nvd.nist.gov/vuln/detail/CVE-2013-3307

https://nvd.nist.gov/vuln/detail/CVE-2016-5681

https://nvd.nist.gov/vuln/detail/CVE-2025-11837

Original source: https://blog.xlab.qianxin.com/arystinger-botnet-hijacks-lega...