Russian Cyber Threats Targeting Consumer Routers

• •Russian intelligence exploited consumer routers for data theft and network attacks.
• •Users are advised to restart routers regularly to disrupt malware connections.
• •Changing default passwords and updating firmware are critical security measures.

In 2026, U.S. cybersecurity agencies disrupted a botnet of compromised consumer routers operated by Russian intelligence. These routers were exploited to steal sensitive information and intercept internet traffic. The NSA and FBI urged users to restart their routers to interrupt malware connections and enhance security. Recommendations included changing default passwords, disabling remote management, and updating firmware. Users were also advised to replace outdated routers that no longer receive firmware updates. The campaign highlighted the vulnerability of small-office-home-office (SOHO) routers, which are often targeted due to outdated security measures. The NSA emphasized the importance of proactive security measures to protect against these threats.