TP-Link Routers Under Scrutiny: Security Concerns and Legal Battles

TP-Link, the leading Wi-Fi router brand in the United States, is facing increased scrutiny over alleged security vulnerabilities and ties to China, sparking legal action from the state of Texas and raising concerns about potential cyberattacks. While a federal ban was considered, it has been shelved, leaving Texas to continue the legal fight.

The Microsoft Report and Covert Network

Security researchers at Microsoft identified a Chinese hacking entity maintaining a large network of compromised network devices, with a significant portion being TP-Link routers. This network, dubbed CovertNetwork-1658, consists of compromised or leased devices, including a majority of TP-Link routers, and has been used to launch cyberattacks targeting Western organizations, including think tanks, government organizations, and Defense Department suppliers.

Texas Sues TP-Link Over Alleged Deceptive Practices

The state of Texas has filed a lawsuit against TP-Link, alleging the company misled consumers about its connections to China and the security of its products. Texas Attorney General Ken Paxton claims TP-Link deceptively markets its products with “Made in Vietnam” labels, despite the vast majority of components originating from China. The lawsuit argues that this allows Chinese intelligence agencies to potentially install firmware enabling government access.

TP-Link’s Response and Ownership Structure

TP-Link maintains that it is now US-owned and assembles products in Vietnam. However, the lawsuit contends that the company’s reliance on Chinese-made components leaves it vulnerable to pressure from Chinese intelligence agencies. TP-Link initially spun off its US brand, TP-Link Systems, in Irvine, California, in 2022.

Federal Ban Shelved, Political Considerations at Play

Following investigations by the Departments of Commerce, Defense, and Justice, a federal ban on TP-Link routers was widely anticipated. However, the White House reportedly shelved the plan ahead of a summit between former President Trump and China’s Xi Jinping.

Market Dominance and ISP Branding

TP-Link routers account for approximately 65% of the US market. Many consumers are unaware they own a TP-Link router, as many are supplied by Internet Service Providers (ISPs) and carry the ISP’s branding. Over 300 ISPs supply badged TP-Link routers to US customers, making them present in millions of American homes.

Key Takeaways

• TP-Link routers have been identified as a key component in a network of compromised devices used by a Chinese hacking entity.
• Texas is suing TP-Link for allegedly misleading consumers about the origin and security of its products.
• A potential federal ban on TP-Link routers was shelved due to political considerations.
• Consumers may be unknowingly using TP-Link routers supplied by their ISPs.