FBI Warns of Malware Attacks on End-of-Life Cisco and Linksys Routers

By Netvora Tech News

The FBI has issued a warning about a growing threat to end-of-life Cisco and Linksys routers, which are being targeted by criminals using proxy services. The routers, which are no longer receiving security updates, are being infected with malware and then used to launch further attacks or sold as proxies to other criminals.

Criminal Proxy Services Exploit Known Vulnerabilities

The FBI warns that two criminal services, 5Socks and Anyproxy, are specifically targeting routers that are no longer receiving security updates. These services use known vulnerabilities to compromise the routers, which are then added to a botnet. The router botnet is then used to launch coordinated attacks or sold to other criminals, who can use the routers as proxies for their own attacks.

This allows attackers to hide their location and identity, making it difficult for victims to detect the compromise. The FBI advises owners of end-of-life routers to replace the device with a newer model or disable remote management and perform a reboot.

Routers Difficult to Scan for Malware

The malware is router-based, making it challenging for end-users to determine if their device has been compromised. Virus scanners are unable to scan these devices, the FBI notes.

To help identify a compromised router, the FBI has provided Indicators of Compromise (IoC's), which include specific files created by the malware on an infected router.

The FBI warns that owners of end-of-life routers are at risk of being targeted by criminal proxy services.
The criminal services use known vulnerabilities to compromise the routers and add them to a botnet.
The compromised routers can be used to launch further attacks or sold as proxies to other criminals.
The malware is difficult to detect, as virus scanners are unable to scan the devices.
The FBI advises replacing end-of-life routers with newer models or disabling remote management and rebooting the device.

Take Action to Protect Your Router

It's essential to take action to protect your router from these threats. If you own an end-of-life router, consider replacing it with a newer model or taking steps to secure your current device.