The Cybersecurity Center warns about TP-Link Deco routers. It reminded me of three measures that should be taken on the network device now at the latest. The security police warned about the criminal use of routers earlier in the fall.
Colourbox
The Finnish Transport and Communications Agency Traficom’s Cybersecurity Center has received more reports than usual about network devices located in Finland that have been used, for example, as part of the Mirai botnet.
Routers infected with the Mirai malware can be used in large-scale network attacks. A botnet consists of devices hijacked by criminals.
According to the Cybersecurity Center, criminals have been able to take advantage of TP-Link Deco routers connected directly to the network.
– There is a high probability that the devices in question are online with insecure default settings, says the Cyber Security Center in its weekly review.
In 2016, the Mirai botnet was reported to have spread in Zyxel-branded devices.
The story continues below the picture.
Take these steps
The Cybersecurity Center recommends the following measures when putting the device into use or at the latest now:
- Remove the possibility of remote management of the router from outside your own network or ensure its security.
- Change the default password.
- Update your device and turn on automatic updates.
Read more about securing routers in this article.
The security police also take a serious approach
Finnish Security Intelligence Service warned about the criminal use of routers earlier this fall.
According to Supo, it is possible to use unprotected consumer devices, such as home routers, in state-level cyber espionage.
Sources: Cyber Security Center, Finnish Security Intelligence Service