A recent report from BleepingComputer highlights attackers hijacking Ubiquiti and D-Link routers to steal and resell internet bandwidth. If your business uses these devices and hasn't updated them recently, you need to act now.
This isn't a theoretical threat. Attackers are actively exploiting routers to turn your business internet connection into a product they sell to others. Your bandwidth gets used without your knowledge, your network performance suffers, and you're paying for traffic you didn't generate.
What's Actually Happening
Attackers scan the internet for routers with known vulnerabilities. Once they find one, they install software that routes other people's traffic through your connection. Your router becomes part of a network that criminals rent out to anyone willing to pay.
The people buying this stolen bandwidth might be scraping websites, hiding their location, or doing worse. Meanwhile, your legitimate business traffic competes with this unauthorized usage. You might notice slower speeds, higher latency, or unexplained data consumption.
Why This Matters for Small Business
You probably don't think about your router much once it's installed and working. That's exactly what attackers count on.
Many small businesses install network equipment and never touch it again. No firmware updates, no security reviews, no monitoring. A router deployed three years ago likely has multiple known vulnerabilities by now.
Your internet bill stays the same whether you're using the bandwidth or someone else is using it through your compromised device. But the performance problems are real. Video calls stutter. Cloud applications slow down. File uploads take longer. You might blame your internet provider when the problem is actually sitting in your network closet.
What to Do Right Now
Check your network equipment. If you're using Ubiquiti or D-Link devices, you need to verify they're running current firmware.
For Ubiquiti devices, log into your controller or the device management interface. Check the firmware version against what's available on the Ubiquiti website. If updates are available, schedule them during off hours. Ubiquiti regularly releases security updates, so this should become a routine task.
For D-Link equipment, visit the support page for your specific model. Many older D-Link devices no longer receive updates. If your model is end-of-life and no longer supported, replacement is the only secure option.
While you're checking, look at all your network devices. Older routers, switches, access points, and firewalls all need attention. Make a list of everything connected to your network, find out what version each device is running, and compare that to what's current.
Check for Signs of Compromise
Compromised devices don't always show obvious symptoms, but some warning signs exist.
Unexpected traffic patterns show up in your router logs or your internet service provider's usage reports. If your bandwidth usage has increased without a clear reason, investigate.
Performance degradation that doesn't match your actual usage is another indicator. If five people in the office are having trouble with basic tasks during normal business hours, something might be consuming resources.
Unknown devices or processes running on your router mean trouble. If you can access your router's administration interface, review what's actually running. Anything you don't recognize deserves investigation.
Set Up Regular Maintenance
Network equipment needs the same attention as your computers and servers.
Create a schedule for checking firmware updates. Monthly is reasonable for most small businesses. Set a calendar reminder and assign someone to handle it.
Enable automatic updates if your devices support them reliably. Some business-grade equipment handles this well. Consumer-grade devices are less consistent. Test the feature before trusting it completely.
Document your network equipment. Write down what you have, where it is, what firmware version it runs, and when you last updated it. This takes an hour the first time and saves days of confusion later.
When to Replace Instead of Update
Some equipment is too old to secure properly. If your router hasn't received a firmware update in two years, the manufacturer has probably abandoned it. At that point, no amount of configuration changes will make it secure.
Consumer-grade equipment generally has a shorter support life than business-grade gear. A router from a big box store might get updates for two or three years. Business equipment from vendors like Ubiquiti typically gets support longer, but not indefinitely.
Budget for network equipment replacement every four to five years. Technology changes, threats evolve, and hardware eventually reaches the point where running it creates more risk than replacing it.
Get Help If You Need It
If you're not sure what equipment you have, how to update it, or whether it's compromised, get help. Managed IT providers handle this type of work routinely.
Network security isn't something you can afford to guess at. The cost of having someone verify your setup and fix any issues is considerably less than dealing with a compromised network or explaining to customers why their data was exposed.
Protect Your Bandwidth and Your Business
Unpatched routers are an easy target. Attackers have automated tools that find vulnerable devices in minutes. Once they're in, they use your internet connection as a commodity to sell.
Check your Ubiquiti and D-Link devices today. Update everything that can be updated. Replace anything that can't. Make network maintenance a regular task instead of something you remember when problems arise. Your business depends on your network working properly, which means keeping the equipment that runs it secure and current.
Not sure your IT is as solid as it should be? Take 10 minutes and tell us about your setup. No pressure, no obligation.
Book a 10-Minute Discovery Call →Last updated: October 20, 2026
