D-Link won't be issuing a fix for the six impacted models, but is offering 20% off the price of a new router without the issue.

D-Link reports that six of its VPN routers are impacted by a serious security vulnerability, and should be replaced.

The group is called Helldown, and has been active since summer 2023, a new report from cybersecurity researchers has revealed Sekoia, noting the group most likely uses a previously undisclosed vulnerability in Zyxel’s firewalls for initial access.

This week D-Link identified six older VPN router models, released in 2011 and 2012, which contain a critical security flaw that could cause them to become infected with malware. Since the models are all older and at the end of their service life,