Zbtlink routers ship with ENDLESSDOORS backdoor

VulnCheck found a factory-shipped backdoor, ENDLESSDOORS, in over 20 Zbtlink router models. The rctl implant phones home to command-and-control servers, allowing remote root commands and reverse shells. Zbtlink denied malicious intent, calling it after-sales maintenance, but pulled vulnerable firmware and promised patches.