--- title: MikroTik Security Advisory — Router Firmware Best Practices description: Information for MikroTik router owners about recent spam-related compromises involving outdated firmware and default credentials. image: https://blog.streakwave.com/hubfs/Mikrotik/2026/SecurityAdvisory.jpg --- [![streakwave logo-1](https://blog.streakwave.com/hubfs/streakwave%20logo-1.png)](https://www.streakwave.com) - Product - [Wireless](https://www.streakwave.com/wireless-3) - [3G/4G/LTE](https://www.streakwave.com/3g4glte-2) - [Antennas](https://www.streakwave.com/antennas-3) - [LoRaWAN](https://www.streakwave.com/lorawan-3) - [Point to Multipoint (PTMP)](https://www.streakwave.com/point-to-multipoint-ptmp-3) - [Point to Point (PTP)](https://www.streakwave.com/point-to-point-ptp-3) - [WiFi / Hotspot](https://www.streakwave.com/wifi-hotspot-4) - [Voice and Video](https://www.streakwave.com/voice-and-video-3) - [Audio Loggers](https://www.streakwave.com/audio-loggers-3) - [EnGenius Durafon](https://www.streakwave.com/engenius-durafon-3) - [Gateways and ATAs](https://www.streakwave.com/gateways-and-atas-3) - [Intercoms & Doorbells](https://www.streakwave.com/intercoms-doorbells-3) - [IP Paging](https://www.streakwave.com/ip-paging-3) - [IP PBX Accessories](https://www.streakwave.com/ip-pbx-accessories-3) - [IP PBX Phone systems](https://www.streakwave.com/ip-pbx-phone-systems-3) - [IP Phones](https://www.streakwave.com/ip-phones-3) - [View All](https://www.streakwave.com/voice-and-video-3) - [Networking](https://www.streakwave.com/networking-3) - [Ethernet & PoE Extender](https://www.streakwave.com/ethernet-poe-extender-3) - [Home And Office Automation](https://www.streakwave.com/home-and-office-automation-3) - [Passive Optical Network](https://www.streakwave.com/passive-optical-network-3) - [Routers & Firewalls](https://www.streakwave.com/routers-firewalls-3) - [SFP Modules](https://www.streakwave.com/sfp-modules-3) - [Switches](https://www.streakwave.com/switches-3) - [Accessories](https://www.streakwave.com/accessories-3) - [Adapters](https://www.streakwave.com/adapters-3) - [Amplifiers](https://www.streakwave.com/amplifiers-3) - [Cable Management](https://www.streakwave.com/cable-management-3) - [Cables & Connectors](https://www.streakwave.com/cables-connectors-3) - [Enclosures](https://www.streakwave.com/enclosures-3) - [Licenses](https://www.streakwave.com/licenses-3) - [Lightning & Surge Protection](https://www.streakwave.com/lightning-surge-protection-3) - [Power Supplies](https://www.streakwave.com/power-supplies-3) - [View All](https://www.streakwave.com/accessories-3) - [Tools](https://www.streakwave.com/tools-3) - [Crimping Tools](https://www.streakwave.com/crimping-tools-3) - [Cutting Tools](https://www.streakwave.com/cutting-tools-3) - [Fiber Stripping Tools](https://www.streakwave.com/fiber-stripping-tools-3) - [Punchdown Tools](https://www.streakwave.com/punchdown-tools-3) - [Safety Gear](https://www.streakwave.com/safety-gear-3) - [Screwdrivers](https://www.streakwave.com/screwdrivers-3) - [Spectrum Analyzers & WiFi Site Survey](https://www.streakwave.com/spectrum-analyzers-wifi-site-survey-3) - [Stripping Tools](https://www.streakwave.com/stripping-tools-3) - [View All](https://www.streakwave.com/tools-3) - [Power](https://www.streakwave.com/power-3) - [Power Management](https://www.streakwave.com/power-management-3) - [Power Over Ethernet](https://www.streakwave.com/power-over-ethernet-3) - [Solar and Wind Power (Remote)](https://www.streakwave.com/solar-and-wind-power-remote-3) - [Solar Power (Grid-Tied)](https://www.streakwave.com/solar-power-grid-tied-3) - [Surveillance](https://www.streakwave.com/surveillance-3) - [EnGenius Camera Solutions](https://www.streakwave.com/engenius-camera-solutions-3) - [Fanvil IP Surveillance](https://www.streakwave.com/fanvil-ip-surveillance) - [Grandstream IP Surveillance](https://www.streakwave.com/grandstream-ip-surveillance-3) - [Luxonis AI Cameras & Accessories](https://www.streakwave.com/luxonis-ai-cameras-accessories-2) - [Milesight Cameras and NVRs](https://www.streakwave.com/milesight-cameras-and-nvrs-3) - [UniFi Video Cameras](https://www.streakwave.com/unifi-video-cameras-3) - [Audio/Visual](https://www.streakwave.com/audiovisual-2) - [Audio Amplifiers](https://www.streakwave.com/audio-amplifiers-3) - [Audio Racks](https://www.streakwave.com/audio-racks-3) - [Audio/Video Accessories](https://www.streakwave.com/audiovideo-accessories-2) - [Smart Audio Amplifiers](https://www.streakwave.com/smart-audio-amplifiers-3) - [Speakers](https://www.streakwave.com/speakers-3) - [Clearance](https://www.streakwave.com/clearance-3) - [Clearance - Antennas](https://www.streakwave.com/clearance-antennas-3) - [Clearance - Miscellaneous](https://www.streakwave.com/clearance-miscellaneous-3) - [Clearance - Radios](https://www.streakwave.com/clearance-radios-3) - [Manufacturers](https://www.streakwave.com/manufacturer/all) - Resources - [Calculators](https://www.streakwave.com/calculators) - [Connectors Chart](https://www.streakwave.com/connectors-chart) - [F.C.C. Spectrum Chart](https://www.streakwave.com/files/allochrt.pdf) - [Glossary of Terms](https://www.streakwave.com/glossary) - [Warranty](https://www.streakwave.com/warranty) - Work With Us - [Our Story](https://www.streakwave.com/about-us) - [Become a Reseller](https://www.streakwave.com/become-a-reseller) - [Become a Vendor](https://www.streakwave.com/become-a-vendor-4) - [Request an Account Manager](https://www.streakwave.com/request-an-account-manager-2) - [Lease/Financing Request](https://www.streakwave.com/leasingfinancing-request) - [Training & Certification](https://www.streakwave.com/training-and-certification) - [Careers & Jobs](https://www.streakwave.com/careers-jobs) - [Contact Us](https://www.streakwave.com/contact) - [News & Events](https://blog.streakwave.com) - [Company News](https://blog.streakwave.comtag/company-news) - [Tradeshows & Conferences](https://blog.streakwave.comtag/tradeshows) - [Webinars](https://blog.streakwave.comtag/webinars) - [Product Announcements](https://blog.streakwave.comtag/product-announcements) - [Streakwave Blog](https://blog.streakwave.com) Announcements # MikroTik Security Advisory — Router Firmware Best Practices Information for MikroTik router owners about recent spam-related compromises involving outdated firmware and default credentials. March 10, 2026 --- You may have seen recent reports about a network of approximately 13,000 MikroTik routers being compromised and used to send spam emails. We want to provide clarity on what happened and simple steps to ensure your devices are secure. ![SecurityAdvisory](https://blog.streakwave.com/hs-fs/hubfs/Mikrotik/2026/SecurityAdvisory.jpg?width=1200&height=1005&name=SecurityAdvisory.jpg) **What Happened:** Security researchers discovered that attackers exploited MikroTik routers running outdated firmware to enable a SOCKS proxy feature, turning the routers into relay points for spam email. The compromised routers were then used to send emails that appeared to come from legitimate domains by exploiting misconfigured DNS (SPF) records. This was NOT a flaw in current MikroTik firmware — it targeted devices that had not been updated and were using default credentials. **Am I Affected?** Your router is likely safe if you have: - Updated to the latest RouterOS firmware - Changed the default admin password - Disabled unnecessary services (especially SOCKS proxy) **Recommended Actions:** 1. **Update RouterOS** — Log into your router at its IP address, go to System → Packages → Check for Updates. Install the latest stable release. 2. **Change default credentials** — If you're still using "admin" with no password, change it immediately under System → Users. 3. **Disable SOCKS proxy** — Go to IP → SOCKS and ensure it is disabled (it is off by default). 4. **Review firewall rules** — Ensure management ports (8291/Winbox, 80/443/Web, 22/SSH) are not exposed to the public internet. Restrict access to trusted IPs only. 5. **Check for unknown scripts** — Go to System → Scripts and System → Scheduler. Remove any entries you did not create. **Resources:** - MikroTik security advisory: [https://blog.mikrotik.com/security/](https://blog.mikrotik.com/security/) - Latest firmware downloads: [https://mikrotik.com/download](https://mikrotik.com/download) If you need assistance verifying your configuration or updating firmware, [our support team](https://streakwave.com/contact-us) is happy to help. [Announcements](https://blog.streakwave.com/tag/announcements) [MikroTik](https://blog.streakwave.com/tag/mikrotik) ### The Latest Posts From MikroTik [MikroTik CAT7 LTE Upgrades](https://blog.streakwave.com/mikrotik-cat7-lte-upgrades-bring-faster-performance-and-better-value) June 25, 2026 [Mikrotik Connectivity](https://blog.streakwave.com/mikrotik-connectivity) May 28, 2026 [MikroTik hAP be³ Media: Wi-Fi 7 Performance, Coming Soon](https://blog.streakwave.com/mikrotik-hap-be-media-wi-fi-7-performance-coming-soon) April 29, 2026 [MikroTik LHGG LTE7: Long-Range LTE7 Connectivity for Remote Sites](https://blog.streakwave.com/mikrotik-lhgg-lte7-long-range-lte7-connectivity-for-remote-sites) March 31, 2026 ## Similar posts MikroTik ### [MikroTik FTC21-UPS: Fiber Conversion with Built-In Power Resilience](https://blog.streakwave.com/mikrotik-ftc21-ups-fiber-conversion-with-built-in-power-resilience) March 31, 2026 Tradeshows ### [MUM Europe](https://blog.streakwave.com/2008/12/mum-europe.html) December 9, 2008 Tradeshows ### [MikroTik User Meeting (MUM)](https://blog.streakwave.com/2009/05/mikrotik-user-meeting-mum.html) May 9, 2009 MikroTik ### [MikroTik CAT7 LTE Upgrades](https://blog.streakwave.com/mikrotik-cat7-lte-upgrades-bring-faster-performance-and-better-value) June 25, 2026 Tradeshows ### [MikroTik MUM United States, St. Louis, MO September 19-20, 2013](https://blog.streakwave.com/2013/07/mikrotik-mum-united-states-st-louis-mo.html) July 1, 2013 MikroTik ### [MikroTik SXTsq 5 ax: Compact Wi-Fi 6 Outdoor CPE Solution](https://blog.streakwave.com/mikrotik-sxtsq-5-ax-compact-wi-fi-6-outdoor-cpe-solution) May 29, 2025 ### Stay up-to-date on the latest content from Streakwave. Keep your finger on the pulse of the industry: Subscribe to Streakwave's blog for the most current updates and breakthroughs in wireless technology.   Need Help? Please call us toll free at (888) 604-5234 - About Us - [Our Story](https://www.streakwave.com/about-us) - [Distribution Facilities](https://www.streakwave.com/distribution-facilities-2) - [Training & Certification](https://www.streakwave.com/training-and-certification) - [Download Line Card](https://www.streakwave.com/files/Streakwave%20Line%20Card.pdf) - Resources - [Streakwave Blog](https://www.streakwave.com/blog) - [FCC Spectrum Chart](https://www.streakwave.com/files/allochrt.pdf) - [Glossary of Terms](https://www.streakwave.com/glossary) - [Export & Regulations](https://www.streakwave.com/export-regulations) - Work With Us - [Become a Client](https://www.streakwave.com/become-a-client) - [Become a Reseller](https://www.streakwave.com/become-a-reseller) - [Become a Vendor](https://www.streakwave.com/become-a-vendor-4) - [Leasing & Financing](https://www.streakwave.com/leasingfinancing-request) - [Employment](https://www.streakwave.com/careers-jobs) - Customer Support - [Contact Us](https://www.streakwave.com/contact) - [Request an Account Manager](https://www.streakwave.com/request-an-account-manager-2) - [Request Training Location](https://www.streakwave.com/request-training-location-3) - [Returns & Shipments Concerns](https://www.streakwave.com/shipping-returns) ### Follow us on our social media channels [facebook-f icon](https://www.facebook.com/Streakwave) [linkedin-in icon](https://www.linkedin.com/company/streakwave-wireless) [X Twitter icon](https://twitter.com/Streakwave) [Follow us on Facebook](https://www.youtube.com/channel/UCN9Trb_OkINi5zZK526aTFw) Copyright © 2026 Streakwave. All rights reserved. | [Terms & Conditions](https://www.streakwave.com/terms-conditions) | [Privacy Policy](https://www.streakwave.com/privacy-policy-2) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Streakwave", "url" : "https://blog.streakwave.com/author/streakwave" }, "dateModified" : "2026-03-10T21:21:12.312Z", "datePublished" : "2026-03-10T21:21:12.000Z", "headline" : "MikroTik Security Advisory — Router Firmware Best Practices", "image" : [ "https://blog.streakwave.com/hubfs/Mikrotik/2026/SecurityAdvisory.jpg" ], "mainEntityOfPage" : { "@id" : "https://blog.streakwave.com/mikrotik-security-advisory-router-firmware-best-practices", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.streakwave.com/hubfs/streakwave%20logo-1.png" }, "name" : "Streakwave" } } ```