If you’re using an older router at home, you could be an easy target for hackers.
The FBI has released a public alert identifying 13 outdated router models that are actively being exploited by cybercriminals. Many of these devices no longer get security updates, making them especially vulnerable.
The risk: outdated routers equals no support
These are the specific models at risk:
Linksys: E1000, E1200, E1500, E1550, E2500, E300, E3200, E4200, WRT310N, WRT320N, WRT610N
Cisco: M10
Cradlepoint: E100
Because these models are considered “end-of-life,” they’re no longer supported by their manufacturers. That means no firmware updates, no security patches, and wide-open doors for cyberattacks.
The Threat: “TheMoon” Malware
A malware strain called TheMoon is behind the attacks. First spotted back in 2014, it’s now being used to target vulnerable routers by scanning for open ports and slipping in without a password.
Once inside, the malware hijacks the device and pulls it into a botnet—a network of infected routers used to hide the true origin of online crimes like identity theft, data breaches, and more.
Some compromised routers have reportedly been traced back to state-sponsored hackers in China, aimed at U.S. infrastructure.
What to watch out for:
Your router might be compromised if you notice:
- It’s overheating for no clear reason
- Your internet connection drops frequently
- Settings have changed without your input
- Unknown administrator accounts appear
These are signs your device could be part of a botnet.
What you should do now:
The FBI recommends the following steps:
- Replace it: If you’re using one of the listed models, get a newer router that still receives updates.
- Update firmware: Make sure your router is running the latest available software.
- Change passwords: Use strong, unique credentials for router admin access.
- Turn off remote access: Disable remote management features unless absolutely necessary.
- Monitor your network: Look out for unusual traffic or connected devices.
If you think your router has been hacked, contact your internet provider and consider filing a report with the FBI’s Internet Crime Complaint Center at ic3.gov.
