GRU Hacked Routers in 120 Countries; Skeptics Blame US Government Overreach Over OpenWRT Necessity

Post date: April 15, 2026 · Discovered: April 17, 2026 · 3 posts, 117 comments

APT28, linked to GRU, hacked routers in 120 nations using unpatched vulnerabilities. These exploits enabled man-in-the-middle attacks to harvest credentials by tampering with DNS settings and manipulating DHCP protocols. This points to a massive, distributed compromise of consumer networking gear.

The debate over government mandates surfaces sharply. Some argue restrictions are genuine anti-espionage measures, citing the concern over compromised hardware. Conversely, users like 'CobraChicken3000' suggest the primary threat comes from domestic collusion, not foreign actors. Furthermore, 'azimir' and 'RedWeasel' frame the entire regulatory process—the checking for backdoors—as potentially being a pretense for profit or control. 'Willoughby' states the only robust fix is bypassing manufacturers entirely, forcing open-source solutions like OpenWRT or pfSense.

The consensus screams distrust. The core anxiety is that major tech companies and government bodies are inherently compromised. The most detailed warning comes from 'Cobysev', who reports how ISP modem mandates actively degrade personal security by forcing hardware reliance. Any equipment stamped 'acceptable' by the FCC or DoD must be treated as suspect.

Key Points

SUPPORT

APT28 successfully hacked routers across 120 countries using known vulnerabilities.

Dan Goodin cited evidence of GRU exploits allowing man-in-the-middle credential harvesting via DNS/DHCP manipulation.

SUPPORT

Consumers must bypass ISP/manufacturer gear for reliable security.

Willoughby advocates building custom routers with open-source firmware like OpenWRT or pfSense.

SUPPORT

Government regulations (FCC/DHS) are inherently compromised.

Multiple voices, including 'nonentity', argue that any state-approved hardware should be considered suspect due to potential backdoors.

SUPPORT

The focus on foreign hacking distracts from domestic power abuses.

'CobraChicken3000' argues that domestic collusion or government overreach is the more probable threat actor in the US tech sphere.

SUPPORT

ISP modem upgrades actively undermine user security.

'Cobysev' provided a personal account demonstrating how mandatory upgrades force users to lose control over their local network security.

Source Discussions (3)

This report was synthesized from the following Lemmy discussions, ranked by community score.

1.2k
points
Country that put backdoors into Cisco routers to spy on world bans foreign routers
[email protected]·86 comments·3/24/2026·by RobotToaster·theregister.com
134
points
The FCC just saved Netgear from its router ban for no obvious reason
[email protected]·11 comments·4/15/2026·by MicroWave·theverge.com
128
points
Thousands of consumer routers hacked by Russia’s military
[email protected]·20 comments·4/8/2026·by tharien·arstechnica.com