Home Routers and Cameras Being Hijacked to Attack Websites. Here's How to Protect Yours

Cybersecurity researchers at QiAnXin's XLab discovered a new malware family called RustDuck that hijacks home routers, IP cameras, Android TV boxes, and poorly secured servers. The malware infects these devices in two stages and connects them into a network designed to overwhelm and knock websites and online services offline. Researchers have been tracking RustDuck since February 2026 and note that it is evolving rapidly. This threat affects households with internet routers, security cameras that connect to the internet, and Android streaming boxes. If your router or camera has weak security or uses default passwords, it becomes an easier target. Once infected, your device becomes part of an attack network without your knowledge. Your internet may slow down, and your device helps criminals attack other targets online.

Take these steps right now to protect your home network.

1. Change the default password on your router immediately. Log into your router's settings (check the label on the router or your internet provider's instructions) and create a strong, unique password.
2. Update the firmware on your router, security cameras, and any smart home devices. Check the manufacturer's website for instructions.
3. Change default passwords on all IP cameras and streaming boxes.
4. Disable remote access features on devices unless you specifically need them. Long term protection requires treating your router and connected devices like you treat your computer. Check for firmware updates every few months. Use strong, unique passwords for every device. Consider placing smart home devices on a separate network from your computers and phones if your router supports guest networks. These simple habits make your home network a much harder target for attackers looking for easy victims.