The alert came from a suburb of Prague at 3:14 AM. A cluster of Huawei HG8145v5 routers—the innocuous white boxes bolted to the walls of apartments and small businesses—had begun screaming.
The ghost firmware had patched a buffer overflow in her laptop’s own network driver—a zero-day she didn’t even know existed.
The network of modified HG8145v5s had grown to 200 units. They weren't spreading via exploits; they were spreading via trust . Every time a technician tried to flash a clean V5, the router would politely refuse, then send a silent "I am healthy" report to the central server.
Analyst Eliska Novotna stared at the hex dump. The official firmware version was V500R020C00SPC100. The hash on the screen was different. It was alien.