--- title: The US government warns that Russia state hackers are... description: CISA and allied governments have issued a joint advisory warning that Russian FSB-linked hackers (tracked as Berserk Bear, Energetic Bear, Ghost Blizzard, and... canonical: https://daily.dev/posts/the-us-government-warns-that-russia-state-hackers-are-coming-after-your-router-npf0fmm98 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: The US government warns that Russia state hackers are coming after your router | daily.dev og:description: CISA and allied governments have issued a joint advisory warning that Russian FSB-linked hackers (tracked as Berserk Bear, Energetic Bear, Ghost Blizzard, and... og:url: https://daily.dev/posts/the-us-government-warns-that-russia-state-hackers-are-coming-after-your-router-npf0fmm98 og:image: https://api.daily.dev/og/posts/NPf0FMm98.png og:image:alt: The US government warns that Russia state hackers are coming after your router og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # The US government warns that Russia state hackers are coming after your router **[Ars Technica](https://daily.dev/sources/arstechnica)** · 2 min read · 0 upvotes · 0 comments ## Summary CISA and allied governments have issued a joint advisory warning that Russian FSB-linked hackers (tracked as Berserk Bear, Energetic Bear, Ghost Blizzard, and others) are actively mass-compromising home and small office routers. The attackers scan for devices with SNMP agents using default or weak credentials, then enroll them into botnets used as residential proxy networks to obscure attacks on critical infrastructure. Both Russia and China have been competing to control these devices for years, and efforts to disrupt the botnets have proven to be a whack-a-mole exercise. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Response to CISA Advisory \(AA25-343A\): Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure](https://daily.dev/posts/response-to-cisa-advisory-aa25-343a-pro-russia-hacktivists-conduct-opportunistic-attacks-against--etypghjmt) · Security Boulevard · 0 upvotes · 0 comments - [UK warns of Chinese hackers using proxy networks to evade detection](https://daily.dev/posts/uk-warns-of-chinese-hackers-using-proxy-networks-to-evade-detection-e65ziyo1f) · BleepingComputer · 0 upvotes · 0 comments - [China-linked crews turn routers into covert attack proxies](https://daily.dev/posts/china-linked-crews-turn-routers-into-covert-attack-proxies-dfktw66a9) · The Register · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/the-us-government-warns-that-russia-state-hackers-are-coming-after-your-router-npf0fmm98) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"The US government warns that Russia state hackers are coming after your router","url":"https://daily.dev/posts/the-us-government-warns-that-russia-state-hackers-are-coming-after-your-router-npf0fmm98","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/the-us-government-warns-that-russia-state-hackers-are-coming-after-your-router-npf0fmm98"},"datePublished":"2026-07-13T22:19:07.826Z","dateModified":"2026-07-15T18:52:15.600Z","description":"CISA and allied governments have issued a joint advisory warning that Russian FSB-linked hackers (tracked as Berserk Bear, Energetic Bear, Ghost Blizzard, and...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/5a34b24078adf7ab4074f1404a30488c?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/5a34b24078adf7ab4074f1404a30488c?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Ars Technica","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Ars Technica","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/80883e0e48a34b5ebcf93777016cb3fe","url":"https://daily.dev/sources/arstechnica"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/the-us-government-warns-that-russia-state-hackers-are-coming-after-your-router-npf0fmm98","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Ars Technica","item":"https://daily.dev/sources/arstechnica"},{"@type":"ListItem","position":3,"name":"The US government warns that Russia state hackers are coming after your router"}]} ```