The NSA, FBI, and European cybersecurity agencies have issued an urgent warning for home and small office users to restart their routers weekly to combat a global cyber-espionage campaign by the Russian military unit APT28 (Fancy Bear). The group is exploiting vulnerabilities in hardware, such as TP-Link devices, to hijack DNS settings and steal sensitive data. Since much of the malware used is non-persistent and resides in volatile memory, a simple reboot can clear the malicious code and disrupt the hackers' command-and-control links. Experts also advise disabling remote management, keeping firmware updated, and replacing legacy equipment that no longer receives security patches.
Alert: NSA and European authorities recommend weekly router reboots to stop Russian espionage
Saturday, 11 April 2026RSS








