FBI uppmanar till säkerhetsåtgärder för routrar efter ryska GRU-attacker

Amerikanska federala myndigheter har avslöjat att rysk militär underrättelsetjänst har kompromitterat tusentals routrar för små kontor och hem, och uppmanar nu ägare att vidta omedelbara skyddsåtgärder.

FBI och NSA meddelade den 7 april att en GRU-enhet känd som APT28 eller Fancy Bear har riktat in sig på SOHO-routrar sedan minst 2024. Operationen innebar DNS-kapning för att avlyssna inloggningsuppgifter och kommunikation, vilket har påverkat enheter i 23 delstater och berört över 5 000 konsumentenheter samt 200 organisationer enligt rapporter från Microsoft.

Relaterade artiklar

Illustration depicting FCC ban on new foreign-made routers due to security risks, featuring banned router, US flag, and production shift to America.
Bild genererad av AI

FCC bans new foreign-made routers as security risk

Rapporterad av AI Bild genererad av AI

The Federal Communications Commission announced on March 23, 2026, that new consumer-grade routers manufactured outside the US pose an unacceptable national security risk and will be added to its Covered List. The ban applies to sales of new models but spares existing and previously authorized routers. Manufacturers may seek exemptions by planning to shift production to the US.

The FBI, BND and BfV warn of attacks by Russian state hackers on TP-Link routers and WLAN extenders. The Fancy Bear group has infiltrated thousands of devices worldwide to steal sensitive data. In Germany, 30 affected devices have already been detected.

Rapporterad av AI

One week after the FCC banned sales of new foreign-made Wi-Fi routers over national security risks, new details emerge on implicated cyberattacks and growing criticism of the broad policy's effectiveness.

The FBI, CISA, NSA, EPA, Department of Energy, and US Cyber Command issued a joint advisory warning of intensified cyberattacks by Iranian-affiliated hackers on programmable logic controllers (PLCs) in US critical infrastructure. Attacks since at least March 2026 have caused operational disruptions and financial losses in government facilities, wastewater, water, energy, and municipal systems, amid escalating tensions in the US-Israel war with Iran.

Rapporterad av AI

CrowdStrike has issued a warning about the speed of cyber attacks, stating that attackers can move through networks in under 30 minutes. The company describes the situation as an 'AI arms race,' emphasizing the need for security teams to respond faster than adversaries. Researchers highlight breakout time as a key indicator of evolving intrusion methods.

Daniel Stenberg, creator of the widely used curl program, draws parallels between his project and a cyberattack that nearly succeeded two years ago. In an interview in Huddinge, he stresses the importance of trust in open-source software underpinning the internet. An expert warns he could theoretically shut down half the internet.

Denna webbplats använder cookies

Vi använder cookies för analys för att förbättra vår webbplats. Läs vår integritetspolicy för mer information.
Avböj