Risks
Most attacks on home networks don't target “hacked fiber routers” – they target the places where people install software, create accounts, and connect devices. Understanding the five areas below lets you realistically assess your own risk.
1. Phishing and Account Takeover
The most common cause of compromised accounts is not a technical exploit, but a well-made email: a Microsoft login form that looks just like the real one, an “URGENT” email prompting you to click a link. Anyone who types their password into a forged form loses their account – even without any virus running on the PC.
Effective countermeasures: a password manager with auto-fill (KeePassXC or Bitwarden – see Downloads), two-factor authentication on the Microsoft account and ideally with the email provider too, and inbox discipline (don't open links under time pressure).
2. Router and Wi-Fi
The home router is the one point where an attacker can reach directly into your network from outside. Factory settings on many routers are generous: simple admin passwords, an open “guest Wi-Fi” network, UPnP enabled, outdated firmware. The typical picture in a compromised home network: a router with five-year-old firmware and a provider-issued admin password printed on a sticker on the underside.
Effective countermeasures: keep firmware up to date, change the admin password, disable remote management from the internet, turn off UPnP, enable guest Wi-Fi only when needed, and use WPA2/WPA3 Wi-Fi encryption.
3. Patch Status
Windows updates, driver updates, and third-party firmware updates (graphics card, printer, USB devices) are the reason known security vulnerabilities can no longer be exploited on an up-to-date system. Anyone who dismisses “update and restart” for months keeps running a vulnerable system.
Effective countermeasures: automatic Windows Update, set active hours in Windows so the default update schedule is respected, get drivers from the device manufacturer (not from a driver CD or third-party websites).
4. Malware from Downloads
Email attachments with macros, “free” PDF converters, pirated software with a built-in trojan. Windows itself brings enough protection with Defender, SmartScreen, and the modern Microsoft Defender Antivirus – as long as you don't manually disable anything and don't install from untrusted sources.
Effective countermeasures: leave Defender enabled, don't dismiss SmartScreen warnings, keep macros disabled by default in Office, install software only from the manufacturer or the Microsoft Store.
5. Open Remote Access and Cloud Storage
TeamViewer, AnyDesk, RDP ports forwarded on the router, OneDrive or Google Drive accounts with weak passwords. If you make your PC reachable from outside, you need to secure that door just as carefully as the front door. Cloud storage accounts an attacker has full access to are the same risk as a locally compromised PC.
Effective countermeasures: enable remote access only when actively needed, strong passwords and 2FA on cloud accounts, review sharing settings regularly.
What this page doesn't cover
This page is aimed at home users and small home-office setups. Companies with employees, critical infrastructure, or devices holding sensitive data are subject to different requirements (BSI IT baseline protection, NIS-2, ISO 27001). In those cases, consult an IT security service provider.