Routers and gateways connect Kenyan offices, county facilities, businesses, schools, hospitals and other organisations to the internet.
When poorly maintained, these devices can also provide cybercriminals with an entry point into organisational networks.
The Evooo1Bot malware targets vulnerable internet-facing Linux routers and gateways and can use compromised devices to perform several malicious activities, including credential theft, SSH attacks, proxy services and Distributed Denial-of-Service attacks.
Kenyan organisations should identify all externally accessible network devices, apply available firmware and security updates and disable remote-management services that are not required.
Default usernames and passwords must be replaced, and unsupported equipment that no longer receives security updates should be retired.
Network infrastructure should be included in routine vulnerability assessments rather than being overlooked because it is considered basic connectivity equipment.
A compromised router can become both an entry point into an organisation and an attack platform against others.