The U.S. government is considering banning TP-Link routers starting next year if ongoing investigations find that their use in cyberattacks poses a national security risk.
According to a Wall Street Journal report, the U.S. Departments of Justice, Commerce, and Defense are looking into the issue, with at least one Commerce Department office having already subpoenaed the company.
In recent years, TP-Link’s market share has grown to approximately 65% of the U.S. market for SOHO routers (for homes and small business offices). This potentially artificial growth is powered by selling the devices for less than their manufacturing price, which the DOJ is also investigating.
Over 300 U.S. internet service providers are now issuing TP-Link devices as the default internet router for home users. The WSJ said that TP-Link routers are also present on the networks of multiple government agencies, including the Defense Department, NASA, and DEA.
“We welcome any opportunities to engage with the U.S. government to demonstrate that our security practices are fully in line with industry security standards, and to demonstrate our ongoing commitment to the U.S. market, U.S. consumers, and addressing U.S. national security risks,” a spokesperson for TP-Link’s U.S. subsidiary told the WSJ.
TP-Link router botnet used in password spray attacks
The investigation comes after a Microsoft report revealed in October that a botnet of hacked SOHO routers—tracked as Quad7,…