A suspicious firmware update was detected targeting a router. The update was initiated from an external IP address associated with the BlackTech APT group. The malicious firmware was identified by its hash, indicating it was designed to exploit vulnerabilities in Japanese and Taiwanese network devices.