Topic

White-label hardware supply chain

OEM and ODM arrangements that put one hardware platform and firmware behind many retail brands, obscuring provenance for buyers and defenders.

Current clusters

build1 distinct publisher

A root implant in ZBT router firmware takes orders from whoever holds the C2 position

VulnCheck says SPEAKINGSTONE beacons as root over cleartext UDP with no authentication. Control passes to anyone who occupies that channel, and a second implant in the same firmware image turned up in 22 countries.

Publishers:docs.vulncheck.com

Reality

Evidence58
Adoption40
Hype gap+12
Incentives76

build2 distinct publishers

An all-zero MAC address bypasses the root command check in ZBT-derived white-label routers

VulnCheck found a root command channel in ZBT-derived OEM firmware that the default WAN firewall leaves open. Only the board ID and the firmware hash tell you whether your branch office is running it.

Publishers:dev.totomshardware.com

Reality

Evidence72
Adoption66