FBI Warns Against Using 13 Outdated Routers Vulnerable to Malware

On May 29, 2025, the FBI issued an advisory warning consumers against using 13 specific router models, primarily older Linksys devices sold under the Cisco brand. These routers have reached their end-of-life status, meaning they no longer receive security updates and are thus susceptible to known vulnerabilities. The warning comes in the wake of revelations that these devices have been compromised by TheMoon malware, which has been active since 2014. This malware allows hackers to take control of the routers, spread infections to other connected devices, and reroute traffic through malicious proxy networks.

The compromised routers were reportedly used to power botnets and operate illicit proxy services like Anyproxy and 5Socks, both of which have been shut down by authorities. The FBI originally included E100 and E300 in its list, but later corrected the advisory, clarifying these were mistakenly listed and not end-of-life products.

The final list includes: E1200, E2500, E1000, E4200, E1500, E3000, E3200, WRT320N, E1550, WRT610N, M10, and WRT310N. Consumers are advised to replace these models, especially if they haven’t been updated in years, and avoid buying second-hand or outdated routers that may still be vulnerable.