The Canadian Centre for Cyber Security (Cyber Centre) has joined the United States’ National Security Agency (NSA) and the following international partners in releasing cyber security guidance on improving router hygiene to protect against Russian state-sponsored targeting:
- Australian Signals Directorate's Australian Cyber Security Centre (ASD's ACSC)
- Czech Republic’s National Cyber and Information Security Agency (NÚKIB)
- Danish Defence Intelligence Service (DDIS)
- Estonian Foreign Intelligence Service (EFIS)
- Estonian Information System Authority (RIA)
- Finnish Defence Intelligence Agency (FDI)
- Finnish Security and Intelligence Service (SUPO)
- French Cyber Security Agency (ANSSI)
- Italian External Intelligence and Security Agency (AISE)
- Italian Internal Intelligence and Security Agency (AISI)
- New Zealand’s National Cyber Security Centre (NCSC-NZ)
- Swedish National Cyber Security Centre (NCSC-SE)
- The Military Counterintelligence Service of Poland (SKW)
- United Kingdom’s National Cyber Security Centre (NCSC-UK)
- United States’ Cybersecurity and Infrastructure Security Agency (CISA)
- United States’ Department of Defense Cyber Crime Center (DC3)
- United States’ Federal Bureau of Investigation (FBI)
This joint guidance details how cyber actors from the Russian Federal Security Service (FSB) Center 16 continue to exploit poorly configured and vulnerable networking devices worldwide, opportunistically targeting multiple critical infrastructure sector networks. It builds on the FBI’s public service announcement, Russian government cyber actors targeting networking devices, critical infrastructure, concerning the decade-long FSB Center 16’s cyber activity. This guidance also provides additional tactics, techniques, and procedures to help defenders to better understand and counter the threat.
The authoring agencies urge device owners and network defenders to take mitigation and remediation actions against Russian government-sponsored exploitation of vulnerable routers.
Consult the full joint guidance: Improve router hygiene to protect against Russian state-sponsored targeting.