“Zombie” Devices — The Old Gadgets Hackers Love

With Halloween around the corner, it seems fitting to talk about “zombies,” the tech kind, not the trick-or-treat kind. A zombie device is an old router, camera, DVR, or smart gadget that’s still plugged in and connected to the internet, but is no longer getting security updates from its manufacturer. Left alone, it becomes an easy target for hackers, and it may already be doing their bidding without you knowing it.

Here’s how it happens: every connected device, from your Wi-Fi router to your video doorbell, runs on software that occasionally needs a security patch, much like your phone or computer. But manufacturers eventually stop supporting older models. Once that support ends, any newly discovered vulnerabilities never get fixed. Hackers know this, and they actively scan the internet looking for these forgotten, outdated devices.

When they find one, they can quietly take it over and add it to a “botnet,” a network of hijacked devices controlled remotely, without you ever noticing your smart camera or router has been compromised. Botnets built this way have grown to include millions of devices worldwide, from home routers and DVRs to smart TVs, and they’ve been used to launch some of the largest cyberattacks on record this year. Your device doesn’t get “destroyed” in the process, it just keeps working normally for you while secretly working for someone else too.

How to keep your devices from turning into zombies:

• Take inventory. Walk through your home and make a mental (or written) list of everything connected to your Wi-Fi: routers, cameras, smart plugs, TVs, baby monitors, thermostats. If you don’t know it’s there, you can’t secure it.
• Check for updates regularly. Most devices have a companion app or web page where you can check the current firmware version and whether updates are available. Turn on automatic updates whenever that option exists.
• Retire what’s no longer supported. If a manufacturer has officially discontinued support for a device (check their website), it’s time to replace it, especially routers, cameras, and anything else facing the open internet.
• Change default passwords. Many older devices ship with a simple factory password like “admin” or “1234,” and plenty of owners never change it. That default password is often the first thing an attacker tries.
• Turn off remote access you don’t use. If you never need to check a device from outside your home, disable remote administration in its settings so it isn’t exposed to the internet at large.
• Buy with support in mind. When shopping for new smart devices, favor brands with a track record of publishing regular security updates over the cheapest no-name option.

None of this means you need to rip out your smart home or panic about every gadget on your network. It just means giving your devices the same basic upkeep you’d give your computer or phone. A little routine maintenance is all it takes to make sure your gadgets stay on your team, and not someone else’s zombie horde. Happy Halloween!