A proxyjacking campaign has infected devices in 34 countries, secretly reselling victims' internet bandwidth. Learn how hackers target D-Link and Ubiquiti routers and what you can do to protect yourself.
## Your Router Might Be Working for Someone Else Right Now
Imagine this: you're asleep, your Wi-Fi is humming along, and somewhere far away, a hacker is cashing in on your internet connection. That's exactly what's happening in a massive proxyjacking campaign that's hit devices in 34 countries.
This isn't a virus that locks your files or steals your passwords. It's sneakier. It turns your router—that little box you never think about—into a node in a commercial residential proxy network.
### What Exactly Is Proxyjacking?
Proxyjacking is when attackers secretly install proxy software on your device. That software lets someone else route their internet traffic through your connection. They sell this access to businesses or individuals who want to hide their online activity.
So while you're binge-watching your favorite show, your bandwidth is being resold. You pay the bill, they pocket the profit.
### Which Devices Are at Risk?
The campaign has mainly targeted D-Link and Ubiquiti devices. These are popular routers and networking gear, especially among small businesses and tech-savvy homeowners. But don't think you're safe just because you own a different brand—any device with weak security can be hijacked.
> "The most dangerous part is that victims have no idea it's happening. Their internet might slow down a bit, but everything else seems normal."
That's the scary part. There's no ransom note, no flashing warning. Just a silent takeover.
### How Do Hackers Get In?
They're not breaking down the door with sophisticated exploits. Most of the time, they're walking through an open window you forgot to close. Common entry points include:
- Default admin passwords (like "admin" or "password")
- Outdated firmware with known vulnerabilities
- Remote management features left enabled
- UPnP (Universal Plug and Play) turned on unnecessarily
Once inside, they install a proxy client. It runs in the background, using your IP address to make traffic look like it's coming from your home. That's valuable for people who want to bypass geo-blocks or commit fraud.
### Why Should You Care?
Beyond the stolen bandwidth (which you're paying for), there are serious risks:
- **Legal trouble:** If someone uses your connection for illegal activity, the trail leads to your door.
- **Performance drain:** Your internet gets slower, especially during peak hours.
- **Security breach:** Once they're in, they can pivot to other devices on your network.
And if you run a business, this could compromise client data or expose your entire office network.
### How to Protect Yourself
You don't need to be a cybersecurity expert. A few simple steps can make a huge difference:
- **Change default credentials:** Use a strong, unique password for your router's admin panel.
- **Update firmware:** Check for updates monthly. Yes, it's annoying, but it's worth it.
- **Disable remote access:** Unless you absolutely need it, turn off remote management.
- **Turn off UPnP:** It's convenient but often exploited.
- **Monitor your network:** Look for unknown devices in your router's connected devices list.
If you suspect you've been hit, do a factory reset and update everything. Then keep an eye on your network for a few weeks.
### The Bigger Picture
This campaign is a wake-up call. As more of our lives move online, the bad guys are getting creative. They're not just after your data—they're after your resources. Your bandwidth, your processing power, your electricity.
So next time you glance at your router, remember: it's not just a box. It's a potential target. And with a little vigilance, you can keep it from becoming someone else's cash cow.