Eski yönlendiriciler siber suçlulara kiralanıyor; FBI durumdan haberdar

Many tech enthusiasts have a standard drawer of shame or garage shelf full of old tech, including a router that probably hasn't seen a firmware patch in five years but still works fine when plugged in. You might decide to put it to good use by adding it as an extra access point in your home, but according to federal cybersecurity alerts, including explicit warnings from the FBI, abandoned hardware can actually be actively hunted out by threat actors.

Your neglected router isn't just sitting idle. It has likely been quietly compromised, turned into a silent residential proxy node, and rented out to cybercriminals looking to mask their malicious traffic behind your home IP address. Leaving unsupported end-of-life routers plugged into your network is a ticking time bomb. Cybercriminal proxy rings are weaponizing outdated hardware to cloak attacks, turning innocent home networks into proxies for crime.

EOL routers are the prime target

They're easy to attack

Why are end-of-life routers prime targets for this type of cybercrime? Legacy networking gear is so heavily exploited due to the security patch vacuum. When a manufacturer designates a router model as end-of-life (EOL), support essentially stops. This means any critical zero-day vulnerabilities discovered months or years after are essentially left permanently unpatched. This can give hackers a wide-open door and the assurance that nothing will happen in the future to fix it.

There's also the danger of preinstalled remote management. Many legacy routers shipped with remote administration features enabled or vulnerable management daemons that threat actors scan for, exploit, and use to establish persistent root access. Essentially, your ISP wanted to make sure that they were able to control your router from an external point if needed, and now this is a feature that is being completely taken advantage of by hackers and criminals.

There are so many risks to your home

Don't let cybercriminals in

Cybercriminal proxy services can actually monetize your old network bandwidth. They can do this through residential IP masking. Cybercriminals prefer residential IP addresses over commercial data center IPs because traffic originating from a residential home can look a lot more legitimate to security filters. This lets them bypass bot detection systems and rate limits while keeping their IP address private and using yours instead.

They also offer proxy-as-a-service, where they use botnets built from infected end-of-life hardware such as legacy Linksys E-series models like the E1200, E2500, or E1000. Criminals can then run proxy networks where bad actors can rent your home IP addresses by the hour to launch credential stuffing, phishing, and DDoS attacks. Again, they use your IP address as a layer of protection.

This can significantly impact home users, and it's not just an abstract enterprise threat but a direct risk to many households. You might end up with a law enforcement backlash when illegal cyberattacks, threat reconnaissance, or illicit purchases are routed through your compromised residential IP address. Federal investigators or corporate security teams can trace the abuse log straight back to your home connection, and suddenly you'll have the police knocking on your door.

There's also the risk of bandwidth theft and network degradation. While this won't get you in trouble with the law, it can be extremely frustrating as these criminals are quietly siphoning your internet bandwidth in the background in order to tunnel malicious traffic. This can impact your latency and data caps without your knowledge.

Protect your home

Replace your old hardware immediately

Luckily, there are things you can do to protect your perimeter. Obviously, start by auditing your network hardware immediately. Check the lifecycle status of every router, access point, and gateway on your network, and make sure they're still under the manufacturer's support. If the manufacturer no longer pushes security updates, it's probably time to decommission the hardware and replace it with something that's a little bit more protected.

If you can't replace the hardware immediately, disable remote administration on your end-of-life router to block external management access, and reboot the device regularly to disrupt basic in-memory malware persistence scripts.

You can also upgrade to open-source or modern supported stacks by transitioning to modern commercial routers with automatic updates or by flashing old hardware-supported open-source firmware if it's applicable and your hardware permits.

Old routers can be great

Just make sure they are secure

Don't let your garbage be someone else's weapon. In cybersecurity, hardware decay doesn't just mean a device stops working; it can actually become a liability. Keeping an unpatched router plugged into the edge of your network is like leaving your car door wide open with the keys in the ignition. Check your network closet today and pull out any legacy, unsupported routers, wipe them, recycle them properly, and ensure your home perimeter is defended by hardware that still knows how to receive a security patch.