UPnProxy: blackhat proxies via NAT injections | Akamai

This report analyzes weaknesses in UPnP implementations that enable NAT injection and the creation of UPnProxy networks, detailing how attackers exploit exposed WAN services to redirect traffic through compromised devices, the potential uses by threat actors, observed scale in scans, and recommended mitigations such as disabling UPnP or implementing perimetral controls.