The US government warns that Russia state hackers are coming after your router
Summary
The US government warns that Russian state hackers are targeting home and small office routers to hide attacks on important organizations. These hackers use weak security settings on routers to control them and route harmful traffic, making it harder to detect their actions.Key Facts
- Russian state hackers continue to compromise routers worldwide, especially those with weak security settings.
- The hacking groups involved include names like Berserk Bear and Energetic Bear.
- Hackers scan routers using a network protocol called SNMP, often exploiting default or weak passwords.
- Compromised routers are used as exit points to hide attacks on sectors like communications, defense, energy, finance, and government.
- The US and other countries like Australia, Denmark, New Zealand, and the UK issued a joint warning.
- The government advises users to disable SNMP versions 1 and 2, use strong passwords, update firmware, and turn off unnecessary features.
- Similar attacks using routers and proxy networks have also been linked to Chinese hackers, though the current advisory focuses on Russian actors.
- Companies like Google have tried to disrupt these hacker-controlled networks but the threat persists as new networks form.
Read the Full Article
This is a fact-based summary from The Actual News. Click below to read the complete story directly from the original source.
