FBI Warns Of Router Attacks — Is Yours On The List Of 13?

[Kaz]

Quote

 

The FBI cyber division flash number 20250507-001, and associated public service advisory I-050725-PSA, published May 7, have warned that cyber actors are compromising certain end-of-life routers using TheMoon malware botnet. This is particularly nefarious as it doesn’t require any password, but instead infects routers by scanning for open ports and sending a command to a vulnerable script instead. “The malware contacts the command and control (C2) server and the C2 server responds with instructions,” the FBI said, “which may include instructing the infected machine to scan for other vulnerable routers to spread the infection and expand the network.”

 

The flash warning has named a total of 13 end-of-life routers from Cisco, Ericsson and Linksys that are vulnerable to compromise, namely:

 

1. E1200
2. E2500
3. E1000
4. E4200
5. E1500
6. E300
7. E3200
8. WRT320N
9. E1550
10. WRT610N
11. E100
12. M10
13. WRT310N

 

TheMoon malware enables hackers to install proxies on the routers of unknowing victims and use these to conduct further acts of cybercrime. The FBI advised replacing any end-of-life router, and particularly those on the list, with an updated model if at all possible. Beyond this, the FBI also said users should “log in online to the router settings and disable remote management/remote administration, save the change, and reboot the router.”

FBI Warns Of Router Attacks — Is Yours On The List Of 13?

WWW.FORBES.COM

---

Is your router on this list? Act now if it is, the FBI has warned.

 

Most of these are fairly old, but if it ain't broke...  Well, now it's broken.