This malware, first discovered in 2014, has recently seen a surge in activity. It exploits security weaknesses in routers that no longer receive updates from manufacturers, making them vulnerable to cyberattacks.
Unlike typical scams involving phone calls, texts, or emails, this cyber threat can infiltrate your personal network without any interaction from you. Victims are being targeted silently in their own homes.
How TheMoon Malware Works
Once installed on a vulnerable router, TheMoon malware connects to a command and control (C2) server. This server sends instructions to the infected router, allowing cybercriminals to:
• Gain unauthorized access to systems
• Steal sensitive information
• Cause disruptions
• Spread the malware to other routers
The malware turns each infected device into part of a larger malicious network, increasing the threat.
Which Routers Are Affected?
The FBI warns that any router made in 2010 or earlier may be vulnerable. These older models often no longer receive security updates, making them easy targets for hackers.
Specific models identified by the FBI include:
• Linksys E1200
• Linksys E2500
• Linksys E1000
• Linksys E4200
• Linksys E1500
• Linksys E300
• Linksys E3200
• Linksys WRT320N
• Linksys E1550
• Linksys WRT610N
• Linksys E100
• Linksys M10
• Linksys WRT310N
What You Should Do
Residents are strongly urged to:
• Check the make and model of their routers
• Verify whether their router is still supported with security updates
• Replace any router that is no longer receiving updates
Keeping your router up to date is a crucial step in protecting your personal data and preventing unauthorized access.
For more information and guidance, visit the official FBI website or contact your router’s manufacturer.
Tags:
Cybercrime in World