Archive · 6 Aug 2026
Chinese-Made Zbtlink Routers Found With Hidden Backdoor, Researchers Warn
Some internet routers made by a company called Zbtlink have a secret hidden problem.
A computer expert named Baines found a 'backdoor' in them.
A backdoor is a secret way for someone else to get inside.
These routers send a little message to a special internet address every 35 seconds.
That address is linked to a website registered in China.
The people who control that website might be able to take over the router.
If they take over the router, they might also be able to see other computers and devices on the same network.
That could put people's private information at risk.
Baines told the world about this in a blog post to warn people.
Cybersecurity researchers discovered a hidden backdoor in Chinese-made Zbtlink routers.
The backdoor, found by researcher Baines, automatically communicates with a specific IP address and a Chinese-registered domain every 35 seconds.
Baines disclosed the finding in a blog post on his company's website.
Whoever controls those domains could take control of the router.
The backdoor could potentially be used to access other devices on the same network.
- Who
- Baines, a cybersecurity researcher, discovered the backdoor; Zbtlink is the router manufacturer.
- What
- A hidden backdoor in Chinese-made Zbtlink routers that automatically communicates with a specific IP address and a Chinese-registered domain every 35 seconds.
- When
- Not specified in the article.
- Where
- The backdoor communicates with a specific IP address and a Chinese-registered domain; Baines disclosed the finding on his company's website.
- Why
- The controllers of the domains could take control of the router and potentially use it to access other devices on the same network.
- Affected product
- Zbtlink routers (Chinese-made)
- Vulnerability
- Hidden backdoor
- Discovered by
- Baines, cybersecurity researcher
- Communications interval
- Every 35 seconds
- Communications target
- Specific IP address and Chinese-registered domain
- Disclosure method
- Blog post on the company's website
- Potential impact
- Remote router takeover and possible access to other devices on the network