{"id":1228,"date":"2018-05-29T19:39:03","date_gmt":"2018-05-29T19:39:03","guid":{"rendered":"https:\/\/warp.lacnic.net\/vpnfilter-botnet-de-mas-de-500-000-routers\/"},"modified":"2023-06-07T16:35:05","modified_gmt":"2023-06-07T13:35:05","slug":"vpnfilter-botnet-de-mas-de-500-000-routers","status":"publish","type":"post","link":"https:\/\/csirt.lacnic.net\/en\/news\/vpnfilter-botnet-de-mas-de-500-000-routers","title":{"rendered":"VPNFilter: Botnet de m\u00e1s de 500.000 routers"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"size-medium wp-image-1089 aligncenter\" src=\"https:\/\/csirt.lacnic.net\/wp-content\/uploads\/vpnfilter-300x95.jpg\" alt=\"\" width=\"300\" height=\"95\" srcset=\"https:\/\/csirt.lacnic.net\/wp-content\/uploads\/vpnfilter-300x95.jpg 300w, https:\/\/csirt.lacnic.net\/wp-content\/uploads\/vpnfilter.jpg 640w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/p>\n<p>El d\u00eda 25 de mayo de 2018 el equipo de investigadores de Cisco Talos (talosintelligence.com) notificaron una nueva familia de malware llamado VPNFilter, el cual afecta al menos a unos 500.000 routers y NAS en todo el mundo y es capaz de robar credenciales, exfiltrar informaci\u00f3n e incluso destruir el dispositivo afectado.<\/p>\n<p>Si bien los ataques est\u00e1n dirigidos en su mayor\u00eda a hosts de Ucrania donde se registr\u00f3 el mayor pico de infecciones, tambi\u00e9n otros 54 pa\u00edses se han visto afectados.<\/p>\n<p>Dispositivos de marcas como Linksys, MikroTik, NetGear y TP-Link estar\u00edan afectados. Hasta la fecha se sabe que el malware afecta a diferentes equipos, tanto de uso dom\u00e9stico como empresarial. Las modelos listados se sabe que son vulnerables, lo que no quiere decir que no pueda haber otras modelos afectados. (ver lista al final del art\u00edculo)<\/p>\n<p>La infecci\u00f3n ocurre en tres etapas:<\/p>\n<ol>\n<li>En primer lugar el malware se <b>instala en el dispositivo de forma persistente<\/b>, a diferencia de otros virus para dispositivos IoT que suelen borrarse al reiniciar el aparato. En esta primera etapa tambi\u00e9n se establece contacto con alguno de los servidores de C2 para pasar a la segunda etapa de despliegue.<\/li>\n<li>En la segunda etapa se descarga el payload que permitir\u00e1 al troyano <b>ejecutar comandos, exfiltrar informaci\u00f3n y ficheros<\/b> o incluso <b>destruir el dispositivo<\/b> sobreescribiendo su firmware.<\/li>\n<li>La tercera etapa extiende las funcionalidades que se consiguen en la segunda, permitiendo <b>interceptar y analizar paquetes<\/b>, el <b>robo de credenciales o monitorizar el protocolo de Modbus SCADA<\/b>.<\/li>\n<\/ol>\n<p><img loading=\"lazy\" decoding=\"async\" class=\" wp-image-1090 aligncenter\" src=\"https:\/\/csirt.lacnic.net\/wp-content\/uploads\/vpnfilter_diagram-300x219.jpg\" alt=\"\" width=\"673\" height=\"491\" srcset=\"https:\/\/csirt.lacnic.net\/wp-content\/uploads\/vpnfilter_diagram-300x219.jpg 300w, https:\/\/csirt.lacnic.net\/wp-content\/uploads\/vpnfilter_diagram-768x562.jpg 768w, https:\/\/csirt.lacnic.net\/wp-content\/uploads\/vpnfilter_diagram-1024x749.jpg 1024w, https:\/\/csirt.lacnic.net\/wp-content\/uploads\/vpnfilter_diagram.jpg 1459w\" sizes=\"auto, (max-width: 673px) 100vw, 673px\" \/><\/p>\n<p>La mayor\u00eda de los dispositivos infectados est\u00e1n conectados directamente a Internet (sin mecanismos de seguridad intermedios) y utilizan credenciales por defecto o est\u00e1n afectados por alguna vulnerabilidad ya conocida. De este modo el malware es capaz de infectar y propagarse a otros dispositivos. Los equipos infectados son comandados a trav\u00e9s de una red TOR privada.<\/p>\n<h3>An\u00e1lisis del Malware<\/h3>\n<p>El FBI realiz\u00f3 un an\u00e1lisis del malware en b\u00fasqueda de sus puntos d\u00e9biles. Los hallazgos fueron los siguientes:<\/p>\n<ul>\n<li>Si el router infectado es reiniciado, el c\u00f3digo base del malware segu\u00eda presente en la memoria del dispositivo pero los plugins maliciosos desaparecen.<\/li>\n<li>En primer lugar comprobaba im\u00e1genes en Photobucket que ocultaban informaci\u00f3n en sus metadatos, y si no las encontraba se conectaba a un <b>punto de control auxiliar en la URL ToKnowAll[.]com<\/b>.<\/li>\n<\/ul>\n<h3>Soluci\u00f3n<\/h3>\n<p>Los usuarios de los dispositivos afectados deber\u00edan reiniciar esos dispositivos en cuanto les sea posible. Si lo hacen se eliminar\u00e1n los componentes destructivos de VPNFilter.<\/p>\n<p>Para eliminar esta malware por completo, es necesario realizar un FACTORY RESET (o &#8220;hard reset&#8221;) del dispositivo, que hace que \u00e9ste se inicie con la configuraci\u00f3n de f\u00e1brica. Esta acci\u00f3n elimina detalles de configuraci\u00f3n y credenciales que hubi\u00e9semos almacenado, por lo que es recomendable realizar una copia de seguridad.<\/p>\n<p>Una recomendaci\u00f3n que siempre aplica es actualizar dichos dispositivos con la \u00faltima versi\u00f3n de firmware disponible en los sitios de las marcas fabricantes.<\/p>\n<h3>Dispositivos Vulnerables<\/h3>\n<p>El listado podr\u00eda ser m\u00e1s grande, pero actualmente estos son los modelos que est\u00e1n afectados por la vulnerabilidad:<\/p>\n<ul>\n<li>Linksys E1200<\/li>\n<li>Linksys E2500<\/li>\n<li>Linksys WRVS4400N<\/li>\n<li>Mikrotik RouterOS para Routers Cloud Core: Versiones 1016, 1036, y 1072<\/li>\n<li>Netgear DGN2200<\/li>\n<li>Netgear R6400<\/li>\n<li>Netgear R7000<\/li>\n<li>Netgear R8000<\/li>\n<li>Netgear WNR1000<\/li>\n<li>Netgear WNR2000<\/li>\n<li>QNAP TS251<\/li>\n<li>QNAP TS439 Pro<\/li>\n<li>Otros dispositivos QNAP NAS que funcionan con software QTS<\/li>\n<li>TP-Link R600VPN<\/li>\n<\/ul>\n<h3>M\u00e1s Informaci\u00f3n<\/h3>\n<p>New VPNFilter malware targets at least 500K networking devices worldwide<br \/>\n<a href=\"https:\/\/blog.talosintelligence.com\/2018\/05\/VPNFilter.html\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/blog.talosintelligence.com\/2018\/05\/VPNFilter.html<\/a><\/p>\n<p>VPNFilter: New Router Malware with Destructive Capabilities<br \/>\n<a href=\"https:\/\/www.symantec.com\/blogs\/threat-intelligence\/vpnfilter-iot-malware\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/www.symantec.com\/blogs\/threat-intelligence\/vpnfilter-iot-malware<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>El d\u00eda 25 de mayo de 2018 el equipo de investigadores de Cisco Talos (talosintelligence.com) notificaron una nueva familia de malware llamado VPNFilter, el cual afecta al menos a unos 500.000 routers y NAS en todo el mundo y es capaz de robar credenciales, exfiltrar informaci\u00f3n e incluso destruir el dispositivo afectado. Si bien los [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1361,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[46,18,24],"tags":[],"class_list":["post-1228","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-archive","category-news","category-security-alerts"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>LACNIC CSIRT - VPNFilter: Botnet de m\u00e1s de 500.000 routers<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/csirt.lacnic.net\/en\/news\/vpnfilter-botnet-de-mas-de-500-000-routers\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"LACNIC CSIRT - VPNFilter: Botnet de m\u00e1s de 500.000 routers\" \/>\n<meta property=\"og:description\" content=\"El d\u00eda 25 de mayo de 2018 el equipo de investigadores de Cisco Talos (talosintelligence.com) notificaron una nueva familia de malware llamado VPNFilter, el cual afecta al menos a unos 500.000 routers y NAS en todo el mundo y es capaz de robar credenciales, exfiltrar informaci\u00f3n e incluso destruir el dispositivo afectado. Si bien los [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/csirt.lacnic.net\/en\/news\/vpnfilter-botnet-de-mas-de-500-000-routers\" \/>\n<meta property=\"og:site_name\" content=\"LACNIC CSIRT\" \/>\n<meta property=\"article:published_time\" content=\"2018-05-29T19:39:03+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-06-07T13:35:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/csirt.lacnic.net\/wp-content\/uploads\/vpn-filter.png\" \/>\n\t<meta property=\"og:image:width\" content=\"600\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"staffadmin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@lacnic_csirt\" \/>\n<meta name=\"twitter:site\" content=\"@lacnic_csirt\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/news\\\/vpnfilter-botnet-de-mas-de-500-000-routers#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/news\\\/vpnfilter-botnet-de-mas-de-500-000-routers\"},\"author\":{\"name\":\"staffadmin\",\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/#\\\/schema\\\/person\\\/6515878a80d7f33d87c848ee36332423\"},\"headline\":\"VPNFilter: Botnet de m\u00e1s de 500.000 routers\",\"datePublished\":\"2018-05-29T19:39:03+00:00\",\"dateModified\":\"2023-06-07T13:35:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/news\\\/vpnfilter-botnet-de-mas-de-500-000-routers\"},\"wordCount\":614,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/news\\\/vpnfilter-botnet-de-mas-de-500-000-routers#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/csirt.lacnic.net\\\/wp-content\\\/uploads\\\/vpn-filter.png\",\"articleSection\":[\"Archive\",\"News\",\"Security Alerts\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/news\\\/vpnfilter-botnet-de-mas-de-500-000-routers#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/news\\\/vpnfilter-botnet-de-mas-de-500-000-routers\",\"url\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/news\\\/vpnfilter-botnet-de-mas-de-500-000-routers\",\"name\":\"LACNIC CSIRT - VPNFilter: Botnet de m\u00e1s de 500.000 routers\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/news\\\/vpnfilter-botnet-de-mas-de-500-000-routers#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/news\\\/vpnfilter-botnet-de-mas-de-500-000-routers#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/csirt.lacnic.net\\\/wp-content\\\/uploads\\\/vpn-filter.png\",\"datePublished\":\"2018-05-29T19:39:03+00:00\",\"dateModified\":\"2023-06-07T13:35:05+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/news\\\/vpnfilter-botnet-de-mas-de-500-000-routers#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/news\\\/vpnfilter-botnet-de-mas-de-500-000-routers\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/news\\\/vpnfilter-botnet-de-mas-de-500-000-routers#primaryimage\",\"url\":\"https:\\\/\\\/csirt.lacnic.net\\\/wp-content\\\/uploads\\\/vpn-filter.png\",\"contentUrl\":\"https:\\\/\\\/csirt.lacnic.net\\\/wp-content\\\/uploads\\\/vpn-filter.png\",\"width\":600,\"height\":400},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/news\\\/vpnfilter-botnet-de-mas-de-500-000-routers#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"VPNFilter: Botnet de m\u00e1s de 500.000 routers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/\",\"name\":\"LACNIC CSIRT\",\"description\":\"Incident Response Center - LACNIC CSIRT\",\"publisher\":{\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/#organization\",\"name\":\"LACNIC CSIRT\",\"url\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/csirt.lacnic.net\\\/wp-content\\\/uploads\\\/lacnic-csirt-2020.png\",\"contentUrl\":\"https:\\\/\\\/csirt.lacnic.net\\\/wp-content\\\/uploads\\\/lacnic-csirt-2020.png\",\"width\":680,\"height\":330,\"caption\":\"LACNIC CSIRT\"},\"image\":{\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/lacnic_csirt\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/#\\\/schema\\\/person\\\/6515878a80d7f33d87c848ee36332423\",\"name\":\"staffadmin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/de0c6fd2fb1bac54ad75003cf602dae06bf1d694dfd6c6699f1ef567587f8c0d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/de0c6fd2fb1bac54ad75003cf602dae06bf1d694dfd6c6699f1ef567587f8c0d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/de0c6fd2fb1bac54ad75003cf602dae06bf1d694dfd6c6699f1ef567587f8c0d?s=96&d=mm&r=g\",\"caption\":\"staffadmin\"},\"url\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/author\\\/staffadmin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"LACNIC CSIRT - VPNFilter: Botnet de m\u00e1s de 500.000 routers","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/csirt.lacnic.net\/en\/news\/vpnfilter-botnet-de-mas-de-500-000-routers","og_locale":"en_US","og_type":"article","og_title":"LACNIC CSIRT - VPNFilter: Botnet de m\u00e1s de 500.000 routers","og_description":"El d\u00eda 25 de mayo de 2018 el equipo de investigadores de Cisco Talos (talosintelligence.com) notificaron una nueva familia de malware llamado VPNFilter, el cual afecta al menos a unos 500.000 routers y NAS en todo el mundo y es capaz de robar credenciales, exfiltrar informaci\u00f3n e incluso destruir el dispositivo afectado. Si bien los [&hellip;]","og_url":"https:\/\/csirt.lacnic.net\/en\/news\/vpnfilter-botnet-de-mas-de-500-000-routers","og_site_name":"LACNIC CSIRT","article_published_time":"2018-05-29T19:39:03+00:00","article_modified_time":"2023-06-07T13:35:05+00:00","og_image":[{"width":600,"height":400,"url":"https:\/\/csirt.lacnic.net\/wp-content\/uploads\/vpn-filter.png","type":"image\/png"}],"author":"staffadmin","twitter_card":"summary_large_image","twitter_creator":"@lacnic_csirt","twitter_site":"@lacnic_csirt","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/csirt.lacnic.net\/en\/news\/vpnfilter-botnet-de-mas-de-500-000-routers#article","isPartOf":{"@id":"https:\/\/csirt.lacnic.net\/en\/news\/vpnfilter-botnet-de-mas-de-500-000-routers"},"author":{"name":"staffadmin","@id":"https:\/\/csirt.lacnic.net\/en\/#\/schema\/person\/6515878a80d7f33d87c848ee36332423"},"headline":"VPNFilter: Botnet de m\u00e1s de 500.000 routers","datePublished":"2018-05-29T19:39:03+00:00","dateModified":"2023-06-07T13:35:05+00:00","mainEntityOfPage":{"@id":"https:\/\/csirt.lacnic.net\/en\/news\/vpnfilter-botnet-de-mas-de-500-000-routers"},"wordCount":614,"commentCount":0,"publisher":{"@id":"https:\/\/csirt.lacnic.net\/en\/#organization"},"image":{"@id":"https:\/\/csirt.lacnic.net\/en\/news\/vpnfilter-botnet-de-mas-de-500-000-routers#primaryimage"},"thumbnailUrl":"https:\/\/csirt.lacnic.net\/wp-content\/uploads\/vpn-filter.png","articleSection":["Archive","News","Security Alerts"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/csirt.lacnic.net\/en\/news\/vpnfilter-botnet-de-mas-de-500-000-routers#respond"]}]},{"@type":"WebPage","@id":"https:\/\/csirt.lacnic.net\/en\/news\/vpnfilter-botnet-de-mas-de-500-000-routers","url":"https:\/\/csirt.lacnic.net\/en\/news\/vpnfilter-botnet-de-mas-de-500-000-routers","name":"LACNIC CSIRT - VPNFilter: Botnet de m\u00e1s de 500.000 routers","isPartOf":{"@id":"https:\/\/csirt.lacnic.net\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/csirt.lacnic.net\/en\/news\/vpnfilter-botnet-de-mas-de-500-000-routers#primaryimage"},"image":{"@id":"https:\/\/csirt.lacnic.net\/en\/news\/vpnfilter-botnet-de-mas-de-500-000-routers#primaryimage"},"thumbnailUrl":"https:\/\/csirt.lacnic.net\/wp-content\/uploads\/vpn-filter.png","datePublished":"2018-05-29T19:39:03+00:00","dateModified":"2023-06-07T13:35:05+00:00","breadcrumb":{"@id":"https:\/\/csirt.lacnic.net\/en\/news\/vpnfilter-botnet-de-mas-de-500-000-routers#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/csirt.lacnic.net\/en\/news\/vpnfilter-botnet-de-mas-de-500-000-routers"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/csirt.lacnic.net\/en\/news\/vpnfilter-botnet-de-mas-de-500-000-routers#primaryimage","url":"https:\/\/csirt.lacnic.net\/wp-content\/uploads\/vpn-filter.png","contentUrl":"https:\/\/csirt.lacnic.net\/wp-content\/uploads\/vpn-filter.png","width":600,"height":400},{"@type":"BreadcrumbList","@id":"https:\/\/csirt.lacnic.net\/en\/news\/vpnfilter-botnet-de-mas-de-500-000-routers#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/csirt.lacnic.net\/en"},{"@type":"ListItem","position":2,"name":"VPNFilter: Botnet de m\u00e1s de 500.000 routers"}]},{"@type":"WebSite","@id":"https:\/\/csirt.lacnic.net\/en\/#website","url":"https:\/\/csirt.lacnic.net\/en\/","name":"LACNIC CSIRT","description":"Incident Response Center - LACNIC CSIRT","publisher":{"@id":"https:\/\/csirt.lacnic.net\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/csirt.lacnic.net\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/csirt.lacnic.net\/en\/#organization","name":"LACNIC CSIRT","url":"https:\/\/csirt.lacnic.net\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/csirt.lacnic.net\/en\/#\/schema\/logo\/image\/","url":"https:\/\/csirt.lacnic.net\/wp-content\/uploads\/lacnic-csirt-2020.png","contentUrl":"https:\/\/csirt.lacnic.net\/wp-content\/uploads\/lacnic-csirt-2020.png","width":680,"height":330,"caption":"LACNIC CSIRT"},"image":{"@id":"https:\/\/csirt.lacnic.net\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/lacnic_csirt"]},{"@type":"Person","@id":"https:\/\/csirt.lacnic.net\/en\/#\/schema\/person\/6515878a80d7f33d87c848ee36332423","name":"staffadmin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/de0c6fd2fb1bac54ad75003cf602dae06bf1d694dfd6c6699f1ef567587f8c0d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/de0c6fd2fb1bac54ad75003cf602dae06bf1d694dfd6c6699f1ef567587f8c0d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/de0c6fd2fb1bac54ad75003cf602dae06bf1d694dfd6c6699f1ef567587f8c0d?s=96&d=mm&r=g","caption":"staffadmin"},"url":"https:\/\/csirt.lacnic.net\/en\/author\/staffadmin"}]}},"jetpack_featured_media_url":"https:\/\/csirt.lacnic.net\/wp-content\/uploads\/vpn-filter.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/csirt.lacnic.net\/en\/wp-json\/wp\/v2\/posts\/1228","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/csirt.lacnic.net\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/csirt.lacnic.net\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/csirt.lacnic.net\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/csirt.lacnic.net\/en\/wp-json\/wp\/v2\/comments?post=1228"}],"version-history":[{"count":0,"href":"https:\/\/csirt.lacnic.net\/en\/wp-json\/wp\/v2\/posts\/1228\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/csirt.lacnic.net\/en\/wp-json\/wp\/v2\/media\/1361"}],"wp:attachment":[{"href":"https:\/\/csirt.lacnic.net\/en\/wp-json\/wp\/v2\/media?parent=1228"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/csirt.lacnic.net\/en\/wp-json\/wp\/v2\/categories?post=1228"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/csirt.lacnic.net\/en\/wp-json\/wp\/v2\/tags?post=1228"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}