INTERNET routers in UK homes have a backdoor that could allow Chinese hackers to access and connect to networks, researchers say.
The revelation has sparked fears that Beijing could be “roaming around” British homes, universities and labs undetected – with “devastating consequences”.
Internet routers in UK homes have a backdoor to China, researchers say Credit: Getty
Hackers could take control of the router and use it to access other devices on the same network Credit: seksan Mongkhonkhamsao
Cybersecurity firm VulnCheck discovered the more than 20 models of a Chinese-made router with the backdoor, dubbed “Endlessdoors”.
It communicates to a specific IP address and Chinese-registered domain every 35 seconds, chief technology officer at VulnCheck Jacob Baines said.
Sign up for The Jattvibe newsletter
Thank you!
Whoever controls the domain could take control of the router and use it to access other devices on the same network, Baines said.
Because every phone, laptop and tablet connects through a router, a successful attack would be “devastating”.
HACK THREAT
Russian cyber criminals ‘hacking UK wifi routers to harvest personal info’
BAD SIGNAL
WiFi alert to all UK homes to check routers NOW over ‘mass blackout’ risk
“If I have it in my lab, in my lab at my university, you just invited them straight into your lab and they can roam the network as they choose,” Baines said.
“The capabilities are devastating.”
The potentially corrupted devices are manufactured and sold by Zbtlink under both the Zbtlink and Wiflyer brand names.
At least 100,000 copies have been deployed worldwide, with units openly sold online in the UK via platforms like Amazon.
Chinese President Xi Jinping has repeatedly denied condoning or carrying out cyberattacks or cyberespionage. Credit: Getty
Earlier this year MPs were warned foreign state-linked hackers could be spying on them through their Wi-Fi Credit: Getty
Beijing has repeatedly denied condoning or carrying out cyberattacks or cyberespionage.
It comes after the Jattvibe revealed that MPs were warned foreign state-linked hackers could be spying on them through their Wi-Fi.
Parliament issued a security alert after the National Cyber Security Centre warned hostile groups were exploiting weaknesses in older home and office routers to monitor internet activity.
The alert said attackers can hijack routers to “redirect users to face websites, capture login details” without people ever realising.
MPs and peers were urged to check whether they use older TP-Link routers that no longer receive security updates and replace them if necessary.
And expert analysts discovered a massive hack affecting thousands of Wifi routers last year.
Analysts who uncovered the hack said it impacted over 9,000 Asus devices – gaining control and adding them to their “army”.
Attackers stealthily accessed the routers over a period of time with their access seemingly immune to reboots and firmware updates.
This gives the hackers control over the affected devices that is hard to block or remove.
Expert said the hack is essentially invisible with little to no trace that devices have been affected.
Western governments are becoming increasingly concerned about Chinese-linked cyber crimes.
In March US regulators announced a ban on imports of new, foreign-made routers over national security concerns.
The agency later exempted many non-Chinese firms.
Zbtlink did not respond to a request for comment.
