CISA Warns of Home Router Vulnerabilities in 'China-Nexus' Covert Networks
The Cybersecurity and Infrastructure Security Agency (CISA), along with the National Cyber Security Centre (NCSC-UK) and other security organizations, has issued a warning about the risks associated with compromised home routers. These devices are reportedly being used in 'China-nexus' covert networks, which are large-scale networks of compromised devices. These networks are utilized for various phases of cyber operations, including reconnaissance, malware delivery, and data exfiltration. The attackers exploit vulnerable devices, such as home routers, webcams, firewalls, and NAS devices, especially those that are end-of-life and no longer receive security updates. The Federal Communications Commission (FCC) has recently banned foreign consumer-grade routers that lack special permissions, but this does not address the compromised routers already in use.