Hackers Are Stealing Your Internet: D-Link and Ubiquiti Devices at Risk

Cybersecurity researchers have uncovered a malicious campaign designed to illegally monetize users' internet resources. Attackers are compromising network devices from popular brands such as D-Link and Ubiquiti to install applications similar to Pawns.app. While these services theoretically offer small payments in exchange for sharing internet bandwidth, in this instance, hackers are deploying them covertly without the owners' permission. ## How 'Proxyjacking' Works Security experts refer to this process as "proxyjacking." Attackers turn these devices into nodes within a residential proxy network. This means that third-party internet traffic is routed through your home or office IP address. Consequently, hackers generate revenue while your network serves as a "clean" address frequently used for suspicious or illicit activities. Research indicates that over 143 compromised devices have already been identified across 34 countries, though the actual figure is likely much higher. In addition to networking equipment, hackers are actively targeting Hikvision and Dahua video surveillance systems. ## Why This Is Dangerous The primary risk is that any suspicious activity conducted through your internet connection is formally linked to your IP address. This can lead to your IP being blacklisted, preventing you from accessing various websites. Furthermore, the FBI has warned that such networks are often used for large-scale cyberattacks, potentially exposing you to legal liability. To maintain persistent access, hackers often install SSH keys, allowing them to retain control over your hardware. ## How to Protect Yourself First, it is essential to regularly update the firmware on your network devices. Manufacturers frequently release patches to address the vulnerabilities that hackers exploit. Additionally, follow these basic security rules: 1. Change default factory passwords and use complex, unique combinations. 2. Disable remote access to your devices unless absolutely necessary. 3. Avoid downloading software from suspicious sources, as it may contain malicious code. If you suspect your IP address is being used in a proxy network, you can check its status using services like GreyNoise. These cyber threats serve as a reminder that modern smart homes and offices require the same level of security attention as computers or smartphones.