Russian hackers are massively attacking vulnerable routers

Official message from the FBI on the X.

What are attacks on network equipment

Attackers are targeting poorly protected or outdated routers in critical sectors of the economy, including energy, defense, healthcare, finance and communications. Using a compromised device even on a company’s edge network can become an entry point into much larger and more sensitive corporate systems.

How hackers hack routers

The methods used by attackers remain quite simple but effective:

• Operation of routers with weak administrator passwords.
• Use of devices with critically outdated software (firmware).
• Exploitation of insecure settings left by default.

Instead of immediately disabling systems, hackers often use captured equipment to map a company’s internal networks and collect VPN credentials. This allows you to gain a foothold in the infrastructure for a long period of time for subsequent cyber espionage.

How to protect your network from hacking

Experts recommend a number of preventive measures to reduce the risk of hacking:

• Firmware update: Regular installation of the latest software versions from router manufacturers.
• Access control: Disabling unnecessary network services, replacing standard factory credentials with complex passwords.
• Authentication: Implement multi-factor authentication (MFA) wherever technically possible.
• Monitoring:Constantly monitors the status of devices to detect abnormal activity.

Organizations are strongly encouraged to replace legacy equipment that is no longer supported by the manufacturer and follow generally accepted industry cybersecurity standards.