FBI urges router security steps after Russian GRU attacks

US federal agencies have disclosed that Russian military intelligence compromised thousands of small office and home routers, urging owners to take immediate protective measures.

The FBI and NSA revealed on April 7 that a GRU unit known as APT28 or Fancy Bear has targeted SOHO routers since at least 2024. The operation involved DNS hijacking to intercept credentials and communications, affecting devices across 23 states and impacting over 5,000 consumer devices plus 200 organizations according to Microsoft reports.

Relaterte artikler

Illustration depicting FCC ban on new foreign-made routers due to security risks, featuring banned router, US flag, and production shift to America.
Bilde generert av AI

FCC bans new foreign-made routers as security risk

Rapportert av AI Bilde generert av AI

The Federal Communications Commission announced on March 23, 2026, that new consumer-grade routers manufactured outside the US pose an unacceptable national security risk and will be added to its Covered List. The ban applies to sales of new models but spares existing and previously authorized routers. Manufacturers may seek exemptions by planning to shift production to the US.

The FBI, BND and BfV warn of attacks by Russian state hackers on TP-Link routers and WLAN extenders. The Fancy Bear group has infiltrated thousands of devices worldwide to steal sensitive data. In Germany, 30 affected devices have already been detected.

Rapportert av AI

One week after the FCC banned sales of new foreign-made Wi-Fi routers over national security risks, new details emerge on implicated cyberattacks and growing criticism of the broad policy's effectiveness.

The FBI, CISA, NSA, EPA, Department of Energy, and US Cyber Command issued a joint advisory warning of intensified cyberattacks by Iranian-affiliated hackers on programmable logic controllers (PLCs) in US critical infrastructure. Attacks since at least March 2026 have caused operational disruptions and financial losses in government facilities, wastewater, water, energy, and municipal systems, amid escalating tensions in the US-Israel war with Iran.

Rapportert av AI

CrowdStrike has issued a warning about the speed of cyber attacks, stating that attackers can move through networks in under 30 minutes. The company describes the situation as an 'AI arms race,' emphasizing the need for security teams to respond faster than adversaries. Researchers highlight breakout time as a key indicator of evolving intrusion methods.

Daniel Stenberg, creator of the widely used curl program, draws parallels between his project and a cyberattack that nearly succeeded two years ago. In an interview in Huddinge, he stresses the importance of trust in open-source software underpinning the internet. An expert warns he could theoretically shut down half the internet.

Dette nettstedet bruker informasjonskapsler

Vi bruker informasjonskapsler for analyse for å forbedre nettstedet vårt. Les vår personvernerklæring for mer informasjon.
Avvis