CIA Created Toolkit for Hacking Hundreds of Routers Models
In addition, French security researcher X0rz noticed a small detail that might help investigators track down CherryBlossom installations. According to the tool's installation guide, the default URL for the CherryWeb control panel is is "https://CherryTree-ip-address/CherryWeb/" (e.g.: https://10.10.10.10/CherryWeb/). Scanning the Internet for CherryWeb web folders will reveal how many CherryBlossom installations are currently deployed online.