The US government issued a warning on Monday regarding the ongoing threat posed by Russian state hackers targeting home and small office routers. According to the Cybersecurity and Infrastructure Security Agency (CISA), these hackers are exploiting poorly configured devices to obscure their activities against sensitive organizations.
Ongoing Threats from Russian Cyber Actors
The advisory highlights that the Russian Federal Security Service (FSB) cyber actors are actively compromising networking devices worldwide. These actors, tracked under names like Berserk Bear and Energetic Bear, are using compromised routers to launch attacks on critical infrastructure.
These hacking groups have been involved in prolonged struggles for control over routers, often replacing their botnets with new ones after US and allied efforts to disrupt them. The CISA noted that this situation has led to a game of
