A group calling itself the White Team appears to be the developer of Linux.Wifatch, a form of malware experts say has been secretly improving the security of otherwise vulnerable home routers.

As Security Intelligence reported earlier this week, a researcher from Symantec first noticed how the Linux.Wifatch malware was infecting devices but primarily focused on fending off other security threats rather than doing any damage of its own. Now, the same researcher told SecurityWeek about finding the project’s source code published online on GitLab by the White Team. The group posted notes along with the code, insisting the efforts were part of learning experiments and that the intention was never to cause any harm. Linux.Wifatch will now be made available under GNU public license.

However, Softpedia News noted that the Linux.Wifatch source code has not been released in its entirety. That’s likely because the White Team is worried that traditional cybercriminals would exploit the malware for more nefarious purposes. It also explains why it was a clandestine operation in which router owners weren’t aware their systems had been infected, even if it was only to defend them against black-hat attackers.

Whether or not anyone appreciates the White Team’s form of vigilante security tactics, they may believe the work should serve as a warning to those who don’t follow basic data protection procedures, Hacked said. For example, there are still untold numbers of home routers that use default passwords and leave admin access wide open to malware and other threats.

For businesses and CISOs, the situation with Linux.Wifatch could also be a reminder that home routers are just the tip of the iceberg in terms of potential malware targets. As Dark Reading suggested, the move to connect more everyday devices as part of the Internet of Things will likely mean the nature of a network changes constantly, blurring the lines between professional and personal boundaries.

Unless we want to depend on more groups like the White Team to keep data safe, everyone’s going to have to work hard to prove they can do a better job of keeping cybercriminals at bay.