If you were alarmed by the recent news regarding the compromise of thousands of ASUS wireless routers by a botnet, and are considering purchasing a new router, you should be aware of specific models to avoid. According to a recent advisory from the FBI, hackers are exploiting at least 13 older router models, primarily sold by Linksys under the Cisco brand, which are being used to fuel botnets and conceal malicious activities.
The routers in question are classified as “end-of-life” models, meaning they no longer receive crucial software updates. This lack of updates renders them vulnerable to known security issues, leaving them open to exploitation. The compromised routers have reportedly been hijacked using a form of malware known as TheMoon, which has been in circulation since 2014. This malware enables attackers to remotely control infected routers, spread to other connected devices, and reroute web traffic through malicious proxy networks.
In a significant operation, the FBI has already seized two proxy services, Anyproxy and 5Socks, which were allegedly powered by these compromised devices, highlighting the severe implications of using outdated technology.
Here is the complete list of router models flagged by the FBI as potentially compromised:
E1200 E2500 E1000 E4200 E1500 E300 E3200 WRT320N E1550 WRT610N E100 M10 WRT310NIt’s important to note that there has been some confusion regarding the E100 and E300 models. As reported by PC Mag, these models might actually refer to products from Cradlepoint. However, Cradlepoint’s parent company, Ericsson, clarified that the E100 and E300 are not end-of-life routers. It appears there was an error in the FBI's advisory, where ‘E100’ was mistakenly listed instead of the more accurate model, ‘E1000.’
Regardless of the confusion regarding specific models, if your router appears on this list and has not received a software update in years, it is advisable to replace it. Additionally, if you were contemplating saving money by opting for an older router model, it is best to steer clear of the ones mentioned above to ensure your home network's security and integrity.