“My Router Has Been Working for Someone Else This Whole Time”: The Devices You Forgot Were Online

For Adults 35–50 (Parents and Non-Parents Alike)

Somewhere in most homes right now sits a router, a smart camera, maybe an old streaming box, quietly running in the background, rarely if ever updated, mostly forgotten. These unglamorous, ordinary devices are exactly what makes them valuable — not to you, but to someone assembling a botnet: a network of hijacked devices, coordinated remotely, used to overwhelm websites, send spam, or brute-force their way into other accounts, entirely without their owners’ knowledge.

What makes this genuinely different from the malware scares of a decade ago is scale and stealth working together. Tools now automatically scan the internet for outdated, unpatched smart devices and exploit them without any human attacker needing to manually target your specific home. Your device isn’t chosen. It’s just found, the same way water finds every unsealed crack in a basement.

This explainer walks through how these hijacked-device networks are actually built and used, in plain, non-technical terms: Botnet Attacks Explained: How They Work & How to Stop Them

The plain-language version: imagine every unlocked bike in a neighborhood quietly getting “borrowed” overnight by the same person, ridden somewhere, and returned before morning — no damage, nothing missing, the owner none the wiser. Multiply that by every unlocked bike on every street, coordinated at once, and you’ve got something closer to what a modern botnet actually looks like: not one dramatic theft, but thousands of small, invisible borrowings happening simultaneously.

Concrete steps for the household devices you own:

1.          Make a quick list of every internet-connected device in your home — router, smart TV, camera, thermostat, streaming box, old tablet gathering dust — because you can’t secure what you’ve forgotten exists.

2.          Turn on automatic updates wherever the device allows it, and for anything that doesn’t update itself, put a recurring reminder on your calendar to check manually every few months.

3.          Change the default admin password on your router specifically. It’s one of the single most-skipped steps in home networking, and default router passwords are often public knowledge, searchable by exact model number.

4.          Retire devices that no longer receive security updates from the manufacturer, even if they still technically work. An old router still “working fine” for streaming can simultaneously be working fine for someone else entirely.

None of this requires becoming your household’s IT department, or being a world-class "in the know" network security/ engineer expert. It just means treating your router the way you’d treat your front door lock — not something you install once and never think about again. Turn the knob and check the lock every once in a while.

_________________________________________________________________

This post is part of a series inspired by and meant to complement AI Safety for the Everyday User (In 10 Easy Steps) by Terrence “TerrenceTech” Williams — a plain-language guide covering sixteen classic scams and the ten concrete habits that stop them. The full book goes deeper into the “why” behind each one and lays out a complete, step-by-step action plan.