Microsoft Word - Appendix_Cyclops Blink Sets Sights on ASUS Routers.docx

Appendix from a Trend Micro report detailing Cyclops Blink activity against Asus routers: includes multiple SHA-256 hashes and other file identifiers, RSA-2560 public keys, a telfhash, an extensive global list of C2 IP addresses (with country mapping and notes of live C&Cs), observed TCP ports used by C&Cs, and numerous SSL certificate fingerprints with issuance/expiration dates — provided to support detection and mitigation.