FBI WARNS USERS TO CHECK THEIR ROUTERS FOR COMPROMISE

Summary from the TLDR InfoSec newsletter

Ubiquiti EdgeRouters are being used by the Russian-backed APT28 group to collect information and proxy malicious traffic. The FBI revealed that it accessed routers belonging to businesses and homes to remove APT28’s malware and add firewall rules to prevent reinfection. The operation did not patch any vulnerabilities - owners are urged to check their equipment for signs of compromise.