Russian Cyber Threats Targeting Consumer Routers

In 2026 U.S. cybersecurity agencies disrupted a botnet of consumer SOHO routers allegedly operated by Russian intelligence that was being used to steal sensitive information and intercept internet traffic; the NSA and FBI urged users to restart routers and follow mitigations such as changing default passwords, disabling remote management, updating firmware, and replacing unsupported devices to disrupt malware persistence and reduce exposure.