Russia’s Military Hackers Targeted Home Routers Across 23 States. Here’s What to Do


For years, a unit of Russia’s military intelligence agency quietly turned ordinary home routers into tools of espionage. The GRU group known as APT28, the same outfit behind the 2016 DNC hack and a string of attacks on NATO targets, exploited unpatched firmware and unchanged default passwords to compromise thousands of devices across 23 US states, redirecting internet traffic through servers under Russian control and harvesting credentials along the way. Federal agents disrupted the operation in April under a court order. What they couldn’t do from a distance was fix the underlying vulnerabilities. That requires five steps from you.

The attack targeted small-office/home-office routers, also known as SOHO routers, and was carried out by a unit in the Russian military intelligence agency, the GRU. Government agencies are urging people to follow basic router hygiene steps, such as updating to the latest firmware and changing default login credentials. The UK’s National Cyber Security Centre includes a number of TP-Link routers specifically targeted by the hackers.

While that news sounds pretty alarming, it’s worth keeping in mind that the attack compromised enterprise routers specifically, so your home Wi-Fi router likely isn’t at risk. That said, some of the affected routers can be used as standard home routers, so it’s worth checking whether your model was exploited in the attack.

“There is a big trend of exploiting routers these days, and that goes both for the consumer and enterprise or corporate routers,” Daniel Dos Santos, vice president of research at the cybersecurity company Forescout, told CNET.

What type of attack is this?

A news release from the NSA notes that the attack indiscriminately targeted a wide pool of routers, with the goal of gathering information on “military, government, and critical infrastructure.”

This attack is linked to threat actors within the Russian GRU — which go by APT28, Fancy Bear, Forest Blizzard and other names — and has been ongoing since at least 2024, according to the FBI. 

It’s known as a Domain Name System hijacking operation, in which DNS requests are intercepted by changing the default network configurations on SOHO routers, allowing the actors to see a user’s traffic unencrypted. 

“For nation-state actors like Forest Blizzard, DNS hijacking enables persistent, passive visibility and reconnaissance at scale,” says a Microsoft Threat Intelligence report on the attack. 

Microsoft identified more than 200 organizations and 5,000 consumer devices impacted by the GRU’s attack. 

Which routers were affected?

The FBI’s announcement refers to one router specifically, the TP-Link TL-WR841N, a Wi-Fi 4 model that was originally released in 2007. The UK’s National Cyber Security Centre lists 23 TP-Link models that were targeted, but notes that it is likely not exhaustive.

Here is the list of affected devices:

  • TP-Link LTE Wireless N Router MR6400
  • TP-Link Wireless Dual Band Gigabit Router Archer C5
  • TP-Link Wireless Dual Band Gigabit Router Archer C7
  • TP-Link Wireless Dual Band Gigabit Router WDR3600
  • TP-Link Wireless Dual Band Gigabit Router WDR4300
  • TP-Link Wireless Dual Band Router WDR3500
  • TP-Link Wireless Lite N Router WR740N
  • TP-Link Wireless Lite N Router WR740N/WR741ND
  • TP-Link Wireless Lite N Router WR749N
  • TP-Link Wireless N 3G/4G Router MR3420
  • TP-Link Wireless N Access Point WA801ND
  • TP-Link Wireless N Access Point WA901ND
  • TP-Link Wireless N Gigabit Router WR1043ND
  • TP-Link Wireless N Gigabit Router WR1045ND
  • TP-Link Wireless N Router WR840N
  • TP-Link Wireless N Router WR841HP
  • TP-Link Wireless N Router WR841N
  • TP-Link Wireless N Router WR841N/WR841ND
  • TP-Link Wireless N Router WR842N
  • TP-Link Wireless N Router WR842ND
  • TP-Link Wireless N Router WR845N
  • TP-Link Wireless N Router WR941ND
  • TP-Link Wireless N Router WR945N

A TP-Link Systems spokesperson told CNET in a statement that the affected models all reached End of Service and Life status several years ago.

“While these products are outside our standard maintenance lifecycle, TP‑Link has developed security updates for select legacy models where technically feasible,” the spokesperson said. 

TP-Link is urging people with these outdated routers to upgrade to a newer device if possible. You can find a list of available security patches on its security advisory page addressing the recent attack. 

How to keep your router safe

The NSA referred organizations to a list of best practices for securing your home network. The most important thing you can do if you’re using one of the impacted devices is to upgrade your router as soon as possible. It likely hasn’t received firmware updates in years, which is like leaving the door to your network unlocked. 

“The longer you carry on doing that, the greater the risk,” said Rik Ferguson, vice president of security intelligence at Forescout. “The router sits in such a privileged position within any network. All of your communication, all of your traffic, has to pass through that device.”

In addition to using a newer device that’s still getting security updates, there are a few other steps you can take to lock down your network: 

  • Update your firmware regularly: Many networking devices allow you to enable automatic firmware updates in the settings. If this is an option, I’d highly recommend doing it. If it’s not, you can find updates for your router by logging into its web interface or using its app.
  • Reboot your router: The NSA’s guidance recommends rebooting your router, smartphone and computers at least once a week. “Regular reboots help to remove implants and ensure security,” the agency says. 
  • Change default usernames and passwords: One of the most common ways hackers gain access is by trying default, manufacturer-set login credentials. “There’s a whole underground economy that underlies all of that,” says Ferguson. “Basically, they just harvest credentials, either through attacks of their own, or by stockpiling them from other sources and buying them.” This username and password combination is different from your Wi-Fi login, which should also be changed every six months or so. The longer and more random your password, the better
  • Disable remote management: Most regular users don’t need to remotely manage their Wi-Fi router, and this is one of the primary ways threat actors can change your router’s settings without your knowledge. You can typically find this option in your router’s admin settings
  • Use a VPN: The FBI’s announcement on the attack specifically recommends that organizations with remote workers use a VPN when accessing sensitive data. These services encrypt your traffic as it passes through a remote server, keeping it safe from hackers.





Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

Recent Reviews


There are places in the world where everything feels accounted for. The roads are smooth, the signs are clear, and the experience has been carefully arranged long before you arrive. Adventure exists, technically, but only within boundaries that make it predictable. Nothing unexpected happens. Nothing pushes back.

And then there are places that still feel wild.

Not reckless. Not uncomfortable. Just untamed enough that you feel like a guest rather than a consumer. Places where the land doesn’t bend to human schedules, where weather sets the tone for the day, and where nature isn’t something you observe from a distance — it’s something you move through, adapt to, and occasionally surrender to. Traveling somewhere that still feels wild changes you in quiet, persistent ways. It slows your thinking. Sharpens your senses. Reminds you how small you are — and how good that can feel.

Alaska is the clearest example we know. But the feeling itself, the pull toward the wild, extends far beyond one place on the map.

The Absence of Predictability Is the Point

Baby bear Pavlovs Bay Alaska
Photo Credit: Jenn Coleman.

When you travel somewhere wild, certainty disappears almost immediately. Plans turn into loose outlines. Timelines soften. The assumption that you’re fully in control starts to fade — and that’s exactly where the experience opens up.

In Alaska, weather doesn’t politely cooperate. Flights wait. Boats adjust for tides. Trails change overnight. Wildlife appears on its own terms, not when you’re ready with a camera in hand. At first, this unsettles people. We’re trained to optimize travel, to squeeze value from every hour, to move efficiently from one highlight to the next.

Wild places resist that mindset. They force you to slow down and pay attention instead.

Instead of rushing, you find yourself watching clouds crawl across a mountain range or listening for the distant crack of shifting ice. You wait because someone has spotted a bear across the river, and suddenly waiting doesn’t feel like lost time — it feels like the entire point. In wild places, patience isn’t a virtue. It’s a requirement.

Nature Isn’t a Backdrop — It’s the Main Character

Endless Adventures Await-Moose - Alaska Glacier Lodge Palmer Alaska
Photo Credit: Jenn Coleman.

In many destinations, nature plays a supporting role. It’s something you admire between meals and museum visits, a scenic pause before moving on to the next activity.

In wild places, nature is the storyline.

In Alaska, the scale alone recalibrates your perspective. Mountains don’t rise politely in the distance; they loom. Glaciers don’t shimmer passively; they groan, fracture, and move. Rivers aren’t decorative — they’re powerful, cold, and very much alive. Wildlife isn’t something you visit. It’s something you encounter, often unexpectedly, and always on its own terms.

That reality changes how you move through the world. You speak more quietly. You scan the horizon. You learn to read the land not just for beauty, but for meaning — wind direction, cloud movement, water levels. You stop expecting nature to perform for you and start allowing it to lead.

Comfort Looks Different in the Wild

View from my room Homer Inn and Spa
Photo Credit: Jenn Coleman.

Traveling somewhere wild doesn’t mean giving up comfort, but it does redefine what comfort actually means. Luxury here isn’t about excess or polish. It’s about warmth after cold. Shelter after exposure. A solid meal after a long day outside.

Some of our most memorable places to stay in Alaska weren’t remarkable because of opulence, but because of where they were. Remote enough that silence felt complete. Close enough to the land that stepping outside meant being fully immersed — weather, wildlife, and all. Comfort in wild places is practical and intentional, and because of that, it feels deeply satisfying.

You notice and appreciate the basics more. Dry socks. Hot coffee. A sturdy roof during a storm. These aren’t assumed; they’re earned. And because you’re more present, they land differently. They feel grounding in a way that polished luxury sometimes doesn’t.

Your Senses Wake Up

Matanuska Glacier, Alaska
Photo Credit: Deposit Photos.

One of the quieter gifts of wild travel is how it reactivates your senses. In daily life, we filter relentlessly just to get through the day — noise, movement, light, information. Wild places strip that filter away.

You smell rain before it arrives. You hear ice shifting miles off. You notice how light changes minute by minute. In Alaska, even the air feels sharper, cleaner, alive. You become aware of your body in space — where you step, how fast you move, what’s happening around you.

This heightened awareness isn’t stressful. It’s calming. It pulls you into the present without effort or instruction. It’s mindfulness without the app, presence without performance.

You Remember What Adventure Actually Means

Hatcher Pass - Gold Cord Lake Trail Alaska
Photo Credit: Jenn Coleman.

Somewhere along the way, adventure became a marketing word. But real adventure, especially in wild places, isn’t about adrenaline or bragging rights. It’s about curiosity, humility, and uncertainty.

Adventure means not knowing exactly how the day will unfold. It means trusting guides and locals. It means adapting instead of controlling. In Alaska, that might look like hiking through mist, unsure if the clouds will lift. Kayaking through ice-dotted water where seals surface nearby. Boarding a small plane knowing weather could change everything.

And when things don’t go according to plan, that doesn’t diminish the experience — it becomes the story. Wild places remind you that the goal isn’t perfection. It’s participation.

Time Feels Different Out Here

Yllas Ski Resort Finland
Photo Credit: Jenn Coleman.

Wild destinations stretch time in ways that are hard to explain until you experience them. Days feel full without feeling rushed. Hours pass unnoticed when you’re fully engaged. Evenings arrive gently, not abruptly.

Without constant stimulation or packed schedules, your nervous system settles. You sleep more deeply. Wake earlier. Feel less urgency to check your phone. In Alaska, the light itself reshapes time, lingering late into the evening in summer, quietly reminding you that clocks are human inventions, not natural laws.

That shift doesn’t disappear when you leave. You return home more aware of how often urgency is manufactured — and more protective of your time because of it.

You Feel Like You’ve Earned the Experience

Kayaking Glacier Bay Alaska
Photo Credit: Jenn Coleman.

There’s a quiet satisfaction that comes from traveling somewhere that isn’t effortless. Wild places often require extra steps — small planes, ferries, long drives, patience. But effort creates investment.

When you arrive, you don’t feel like you stumbled into the experience. You chose it. And that choice creates respect — for the land, for the people who live there, and for the experience itself. In Alaska, simply reaching some destinations comes with stories before the stay even begins.

Wild travel doesn’t hand itself to you. It asks something in return.

Why We’re Drawn to the Wild Now More Than Ever

Waterfall Cove Alaska
Photo Credit: Jenn Coleman.

The pull toward wild places isn’t accidental. After years of constant connectivity, crowded destinations, and carefully curated experiences, many travelers are craving something real. Something grounding. Something that doesn’t ask them to perform.

Wild places offer perspective. They remind us that the world is bigger than our inboxes, that discomfort isn’t dangerous, and that awe still exists — no explanation required. Alaska sits at the heart of this longing, but it isn’t alone. You feel it in remote coastlines, high deserts, northern forests, and far-flung mountain towns around the world.

What unites them isn’t geography. It’s restraint. These places haven’t been overly softened or simplified. They still ask you to meet them where they are.

What You Take Home From a Wild Place

Hikers hiking, enjoying the view of Famous Patagonia Mount Fitz
Photo Credit: Deposit Photos.

You don’t return with just photos. You come back quieter, more observant, and more comfortable with uncertainty. You gain a clearer sense of what you actually need — and what you don’t.

Traveling somewhere that still feels wild recalibrates your sense of scale and self. It reminds you that not everything needs improvement, explanation, or monetization. Some things are powerful simply because they exist.

And once you’ve felt that — once you’ve stood somewhere that didn’t care whether you were there or not — it changes how you travel going forward. You start seeking places that ask something of you. Places that feel alive. Places that leave room for surprise.

Because wildness, in the end, isn’t something you conquer.

It’s something you experience — and carry with you long after you’ve left.

Hi! We are Jenn and Ed Coleman aka Coleman Concierge. In a nutshell, we are a Huntsville-based Gen X couple sharing our stories of amazing adventures through activity-driven transformational and experiential travel.



Source link