It’s tonight.

You’re reading this on your phone.

Somewhere, a computer you’ll never see just tried your router’s front door.

It tries every door on the internet. All night. Every night.

Start with first principles

Your router is a computer nobody watches.

  • Always on.
  • Open to the whole internet.
  • Almost never updated.
Phone Laptop TV Doorbell Tablet Camera Speaker Thermostat Router
One box. Every device you own trusts it.

How they find you

Every home on the internet gets checked. Constantly.

One computer. 4.3 billion addresses. Under 45 minutes.1

Homes checked0

Doors left open0

Illustration. Each dot is a home.

They’re not looking for you. They’re looking for anyone.

How they get in

They don’t break in. They walk in.

  • 62

    The password from the factory

    One attack tried just 62. It took 600,000 devices.2

  • Public

    A flaw nobody fixed

    Flaws get published. Many routers never get the fix.3

  • Old

    A router past its last update

    The FBI warns criminals are taking them over.4

One ordinary evening

Nothing will look wrong. That’s the point.

A made-up family. A normal night. Every detail is based on real attacks.

  1. Dinner. Fourteen devices on your Wi-Fi.

    You could name nine.

  2. The baby monitor’s light is on.

    It always is.

  3. You pay a bill. The bank looks exactly right.

    Same logo. Same address.

  4. The router’s light is steady.

    No blinking. No warning.

  5. One last scroll before bed.

    Your connection is busier than it was all day.

◀◀ Rewind

Now watch it again.

  1. They got in.

    The factory password worked.2

  2. Every device was in reach.

    The camera included.

  3. The bank was fake.

    Your own router sent you there.5

  4. The light never changed.

    Routers don’t warn you.

  5. Your home was for rent.

    To criminals hiding their tracks.4

You noticed none of it.

Almost nobody does.

This isn’t a movie plot

It has already happened.

  • 2016

    600,000

    devices hijacked with factory passwords2

  • 2018

    500,000

    routers infected. The FBI said: restart yours6

  • 2018

    100,000

    routers sending people to fake banks5

  • 2024

    Hundreds

    of US routers used to hide attacks on America7

Here’s what nobody tells you

  • Your phone gets updates.
  • Your laptop gets antivirus.
  • Your router gets nothing.

The answer isn’t fear. It’s walls.

The same home in morning light, family at the kitchen island

What actually works

Four things. Do them tonight.

  • Change the router’s admin password

    Not the Wi-Fi password. The one that controls the router itself.

  • Check it still gets updates

    If the maker stopped updating it, replace it.

  • Wall off your gadgets

    Cameras and smart plugs shouldn’t share a network with your laptop.

  • Know what’s on your Wi-Fi

    Every device, by name. Nothing new without your OK.

The Rio router beside the Rio app showing your rooms

Rio builds the walls for you.

  • Gadgets walled off from your laptops
  • Nothing joins without your OK
  • About 10 minutes to set up
Get Rio, $199.99 Check your router free
  1. ZMap: Fast Internet-Wide Scanning, University of Michigan, USENIX Security 2013. zmap.io
  2. Understanding the Mirai Botnet, USENIX Security 2017. usenix.org
  3. CISA Known Exploited Vulnerabilities Catalog. cisa.gov
  4. FBI: Cybercriminal services target end-of-life routers, May 2025. ic3.gov
  5. GhostDNS, documented by Qihoo 360 Netlab, October 2018. The Register
  6. FBI: Foreign cyber actors target home and office routers, May 2018. ic3.gov
  7. US Department of Justice, January 2024. justice.gov