Mikrotik 64710 Exploit ((link)) Jun 2026

In late 2021, cybersecurity researchers from TeamT5 were monitoring a Command-and-Control (C2) server used by (also known as BlackTech or PLEAD ), an advanced persistent threat (APT) group with a long history of targeting government agencies and tech industries.

The Mikrotik 64710 exploit works by sending a specially crafted request to the router's web interface. The request is designed to exploit the CVE-2018-14847 vulnerability, allowing the attacker to inject malicious code into the router. Once the exploit is successful, the attacker can gain access to the router's system, allowing them to execute arbitrary code, steal sensitive information, or disrupt network operations. mikrotik 64710 exploit

: The group primarily targeted governmental entities, technology industries, and telecommunications in Taiwan, the U.S., Japan, and South Korea. Remediation & Safety Measures Patch Status : MikroTik released a fix for this vulnerability on November 17, 2021 Recommended Versions : The issue is resolved in RouterOS (Long-term), (Stable), and and later. Mitigation Strategy Update Immediately : Update to any version released after November 2021. Configuration Check In late 2021, cybersecurity researchers from TeamT5 were