ISP Windstream Routers Stop Working after Cyberattack
INCIDENT
Unknown threat actor with equally unknown motives forces ISP to replace routers: one day last October, subscribers to an ISP known as Windstream began flooding message boards with reports their routers had suddenly stopped working and remained unresponsive to reboots and all other attempts to revive them. After eventually determining that the routers were permanently unusable, Windstream sent new routers to affected customers. Black Lotus Labs has named the event Pumpkin Eclipse.
Incident Date
October 25, 2023
Location
Estimated Cost
Bricked 600,000 ActionTec T3200 routers over a 72-hour period
Victims
Type of Malware
No Malware identified
Threat Source
No threat source identified
Industries
Impacts
OT IT