The Federal Bureau of Investigation (FBI) has issued a public warning to households still using outdated Wi Fi routers, cautioning that certain older models are increasingly being targeted by cybercriminals.
According to the Federal Bureau of Investigation, routers manufactured in the late 2000s and early 2010s that have reached end of life status are particularly vulnerable. These devices no longer receive software updates or security patches from their manufacturers, leaving known security flaws unaddressed and open to exploitation.
Security officials explained that once a router reaches end of life, it becomes an attractive target because attackers can easily exploit its weaknesses. In a recent advisory, the agency said threat actors are actively scanning the internet for such devices, exploiting exposed remote administration features to upload malware directly onto them.
Several legacy models produced by Linksys were identified as especially vulnerable, including devices released between 2009 and 2011. These models were popular consumer routers at the time but are no longer supported.
Investigators say the attacks often begin with criminals searching for routers that still have remote management capabilities enabled. Once identified, attackers use known software vulnerabilities to gain root level access, effectively taking control of the device. After infection, the router communicates regularly with a command and control server to confirm it remains active.
Compromised routers are frequently absorbed into botnets, which are networks of hijacked devices used to carry out coordinated cyber attacks or provide proxy services to other criminals seeking to conceal their online activities. The malware can also open network ports, turning the router into a covert gateway for malicious traffic.
Cybersecurity experts warn that router based infections are particularly difficult to detect. Traditional antivirus software focuses on computers and mobile devices, not networking hardware. Because the malicious code resides within the router’s operating system rather than on personal devices, users may remain unaware that their network has been compromised.
The agency advises consumers to check whether their routers are still receiving security updates. If a device is no longer supported by the manufacturer, replacement is strongly recommended. Upgrading to a modern router with active security support and regularly updated firmware significantly reduces exposure to such threats.
While the warning does not apply to routers purchased within the last decade that still receive updates, officials stress that maintaining current hardware and enabling automatic updates are essential steps in protecting home networks from increasingly sophisticated cyber attacks.
Get Social, Follow us for more news