A recent Wall Street Journal (WSJ) article reported that U.S. authorities may ban TP-Link routers. According to the WSJ report, investigators from three agencies (Commerce, Defense, and Justice) are conducting individual investigations into the company, and TP-Link routers could be banned from sale in the U.S. this year.
They are investigating whether the China-based manufacturer’s routers pose a national security risk. The routers have been linked to cyber-attacks. Many TP-Link routers hold the top sales spots on Amazon. TP-Link has about 65% of the U.S. residential and small business market. TP-Link’s router market dominance has been achieved because they are cheap, typically about half the price of its competitors.
Many believe that TP-Link routers routinely ship with security flaws that the company often fails to fix. All routers have bugs, but unlike other router manufacturers, TP-Link doesn’t work with security researchers. A TP-Link spokesperson said, “We welcome any opportunities to engage with the U.S. government to demonstrate that our security practices are fully in line with industry security standards, and to demonstrate our ongoing commitment to the U.S. market, U.S. consumers, and addressing U.S. national security risks.”
An October report from Microsoft found that a Chinese hacking network (MS calls CovertNetwork-1658, also known as xlogin and Quad7 or 7777) maintains a large network of compromised network devices mostly consisting of TP-Link routers. Numerous Chinese actors use the network to launch cyber-attacks. They have gone after Western targets including think tanks, government organizations, non-governmental organizations, and suppliers to the Department of Defense.
The Commerce Department review, one of the agencies investigating TP-Link, is being led by the Office of Information and Communications Technology and Services, which has the power to ban companies from designated countries from selling technology to the U.S. based on national security concerns. In its first action in June, the office barred Russian software company Kaspersky from selling products in the U.S. Some people said it would use the same authority to ban TP-Link if it decides to do so.
In 2019, the Trump administration banned telecommunications hardware from China-based Huawei Technologies and ZTE.
—
I am of the opinion that anything made in China that either sends, collects or transfers information electronically needs to be banned. We can only be better for it.
Have we not learned from Tik Tok yet ? or do we just not care that the Chinese Communist Government is collecting data from every single Tik Tok user? And that is only one app , I am sure there are others …. software also.
If we keep turning a blind eye to China it can only be and will eventually be a recipe for catastrophe.
Hi Ed,
I think that is a wise opinion to have. Personally, I don’t purchase anything (software or hardware) that has anything to do with security or communications.
Oops, I left out a word. I meant I don’t purchase anything Chinese (software or hardware) that has anything to do with security or communications.
What should those of us who have already bought TP-Link routers do to protect ourselves against possible Chinese hacking?
By the way, I like my TP-Link router a lot. Not just its improved performance, but its much better user interface.
Hi Steve_K2,
That is your choice. The government is not going to come into your home and take your TP-Link router.
“The government is not going to come into your home and take your TP-Link router.”
John, that wasn’t my question. Which is, what should those of us who have already bought TP-Link routers do to protect ourselves against possible Chinese hacking?
The Chinese have been targeting think tanks, government organizations, nongovernment organizations and Defense Department suppliers, according to the reports. They seem to be going after bigger targets. But, you could still be at risk having an infected router. I’d get a different router, but if you choose to keep yours, I’d follow standard steps to keep your network safer:
1) Keep firmware updated
2)Strengthen your settings (see my article https://davescomputertips.com/my-home-network-was-hacked/ for some ideas)
3) Consider using a VPN
4) Use an antivirus (I use Window’s included Defender)
John, thanks. Found I’m already doing #1 and #4.
Liked your article. Will improve my passwords ASAP.
My computer is a desktop connected to the router via an ethernet cable so have to make sure Remote Access is disabled.
You’re right, it’s unlikely I’m a target, but wouldn’t it be awful if I in fact was.
All this talk about Chinese companies and products. Please name me one Cable Router, or one USB WI-FI Adapter that is NOT made in China? Seriously, if you think other companies want to spy on you, then do not forget that almost every Country does some spying on us, Mindblower!
TP-Link is a Chinese company. They have very close relations and may even be owned, behind the scenes, by the Chinese Communist Party (CCP). Other companies may manufacture some products in China but they are not designed nor is their firmware written in China. (I’d still prefer a product that is completely free of China).
The problem with these Chinese company products that have close ties with / control by the CCP. Once deployed, these infected routers give the threat agents full access to the infected device. The result transforms your trusty router into a proxy for the CCP and making you an unwitting agents of the CCP.
Happy New Year John (no pun that it might be interpreted for CNY). Not sure if that post was intended for me, but want to keep away from politics. If there is a problem with using products from certain Countries, then alternative Country produces need to be given. As you mentioned, Amazon lists many cheaper units, and this in IMHO is the go to place for many people. Do not see any concern for the average person as router signal strength is quite limited, no!
My IP upgraded me from Cable to FO, and supplied me with a Nokia router, but the only dongles I am able to locate come from you know where, Mindblower!