FBI issues warning over ‘infected’ Linksys routers

telcodad

The hacked Linksys models are older models that no longer receive security updates or patches, such as the E1200, E2500, E1000, E4200, E1500, E300, E3200, E1550 - and WRT models 320N, 310N, and 610N. These end-of-life devices are being hijacked with malware called “TheMoon,” which gives hackers full access.

FBI issues warning over ‘infected’ Wifi routers – check device now to stop it being ‘injected’ with info-stealing tech
The infected routers have been linked to Chinese state-sponsored hackers
By Arshi Qureshi, Freelance Digital Reporter, The Sun - May 9, 2025
https://www.the-sun.com/tech/14202073/fbi-warning-hackers-injecting-wifi-routers/

Somewhat-Reticent

News fresh from 2014 !
What of ASUS & all the other brands just as vulnerable ?
How does “install the latest firmware” help ? Or “change default password” ?
Doesn’t “The Moon” worm bypass authentication ?

telcodad

Somewhat-Reticent What of ASUS & all the other brands just as vulnerable ?

Asus and NETGEAR routers have had vulnerabilities mentioned here::

https://broadbandbulletin.com/d/2466-asus-warns-of-critical-auth-bypass-flaw-in-routers-using-aicloud

https://broadbandbulletin.com/d/595-netgear-warns-users-to-patch-critical-wifi-router-vulnerabilities

HardlyWorthit

telcodad

“Recently, some routers at end of life, with remote administration turned on, were identified as compromised by a new variant of TheMoon malware," the FBI added.

If exposed to the internet with remote administration enabled, infection would be expected.

urbanriot

HardlyWorthit

If exposed to the internet with remote administration enabled, infection would be expected.

Yea we’ve been seeing exploits for remote administration for 20 years, I have no idea why anyone on earth would turn it on without a whitelist.