The operation disrupted an attack campaign in January that had compromised small office/home office (SOHO) routers from Ubiquiti, the agency says. The FBI said Thursday that it disrupted a ...

Publicly available tools such as Impacket ntlmrelayx.py and Responder have allowed the threat actors to use Ubiquiti routers to execute NTLM relay attacks and host rogue authentication servers ...

we see Russian state-sponsored cyber actors abusing compromised routers and we are joining this CSA to provide mitigation recommendations." The FBI advisory highlights the ease of use of Ubiquiti ...