Global security agencies say enterprises must clean up their act as Russian government-sponsored attackers exploit weaknesses in routers.
According to a new multinational cybersecurity advisory, cyberattackers continue to exploit inadequately-protected and/or poorly-configured network devices via age-old tactics. Threat actors scan for weakened devices, typically routers, allowing them to “opportunistically” compromise critical infrastructure networks, according to the bulletin from 19 federal agencies across North America, the UK, Europe, and Australia.
They then transfer configuration files to servers they control. These files, containing plaintext or weakly-encoded information like creden...