- WIADOMOŚCI
Russian hackers target internet routers
Russian group APT28 has infiltrated vulnerable internet routers from the manufacturer TP-Link worldwide. German Intelligence services warn about the issue.
The Federal Office for the Protection of the Constitution (BfV), in cooperation with the Federal Intelligence Service (BND) and the Federal Bureau of Investigation (FBI), warns of cyberattacks carried out by the Russian group APT28, which is likely connected to the Russian military intelligence service (GRU). Thousands of publicly locatable TP-Link devices have been compromised. About 30 of these devices have been identified in Germany.
Routers« operators have already received recommendations for action on how to reinforce vulnerable devices and protect them from further attacks. Many TP-Link routers have been replaced.
The BfV is forensically examining TP-Link devices and analysing APT28’s approach to those routers. APT28 is possibly carrying out attacks on the order of the Russian GRU. The hacker group has been previously responsible, among other things, for cyberattacks on the German Bundestag in 2015, the SPD party headquarters in early 2023, and German air traffic control in August 2024.
