FBI: Beware, China’s fresh cyberthreat targets your home internet routers

February 3, 2024
1 min read

TLD: The FBI is warning that Chinese hackers are targeting internet routers made by Cisco and NetGear, using them to launch cyberattacks on critical U.S. infrastructure. The attacks target older routers with outdated security software, and the FBI recommends updating routers to protect against this threat.

The article highlights the following key points:

– The FBI has issued a warning about Chinese hackers targeting internet routers made by Cisco and NetGear.
– The attacks target older routers with outdated security software.
– Hackers can secretly install malware on these routers and use them to launch cyberattacks on critical U.S. infrastructure.
– The FBI has taken down “hundreds” of infected routers in their investigation.
– FBI Director Christopher Wray has warned that Chinese hackers are positioning themselves on American infrastructure to cause harm to American citizens and communities.
– Cyber experts recommend protecting oneself by regularly updating routers and turning off remote access.
– If a home or business router has been hacked, individuals can report it to the FBI at www.ic3.gov.

The article also mentions another form of cyberattack linked to China, where hackers exploited technology made by Ivanti to gain unauthorized access to systems and steal sensitive information. Federal agencies using Ivanti systems were given instructions to disconnect and install patches to protect against these attacks.

In conclusion, the FBI’s warning highlights the ongoing cyberwar between the U.S. and China, with routers being a new target for Chinese hackers. It is crucial for individuals and businesses to ensure their routers have updated security software and to be vigilant against potential cyberattacks.

Latest from Blog

Apache’s OFBiz gets new fix for RCE exploits

TLDR: Apache released a security update for OFBiz to patch vulnerabilities, including a bypass of patches for two exploited flaws. The bypass, tracked as CVE-2024-45195, allows unauthenticated remote attackers to execute code