---
title: "4.85 Billion Hacking Attempts in Nine Months: Bitdefender and Netgear Name Top Targets in Smart Homes"
description: "A joint study by Bitdefender and Netgear based on data from 10.4 million smart homes showed that in the first nine months of 2026, hackers made 4.85 billion attempts to hack home routers, with smart TVs, smart plugs, and NAS devices acting as the main targets."
date: 2026-10-31T17:36:14.910Z
lang: en
url: https://xab.info/en/posts/bitdefender-netgear-iot-threats-2026-smart-home-hacking
tags: [iot, cybersecurity, bitdefender, netgear, smart-home, botnet, vulnerability]
author: "Alexander Buran"
publisher: "XAB.info"
---

# 4.85 Billion Hacking Attempts in Nine Months: Bitdefender and Netgear Name Top Targets in Smart Homes

![White Orbi router in the center connected by blue lines to smart home devices](https://xab.info/media/2026/10/31/bitdefender-netgear-iot-ugrozy-2026-vzlom-domashnih-setey/bitdefender-netgear-iot-ugrozy-2026-vzlom-domashnih-setey-1.webp)

## Key Points

- Between January and September 2026, 4.85 billion router login attempts and 466.6 million brute-force attempts were recorded across 10.4 million smart homes.
- Smart TVs (22.7%), smart plugs (22.4%), and NAS devices (22%) are the most vulnerable—making up 67.1% of detected vulnerabilities.
- Reconnaissance accounts for 90.1% of all attacks; households average 24 connected devices.
- In 99.7% of cases, vulnerabilities are already known and registered; high-risk consequences (privilege escalation, code execution) account for only ~10.3% of incidents.

Cybersecurity firm Bitdefender and networking equipment manufacturer Netgear have published the results of a joint study dedicated to the evolution of threats in the Internet of Things segment. The report is based on telemetry data collected from January to September 2026 across 10.4 million smart homes worldwide. The experts analyzed 5.4 billion security-related events and 1.2 billion vulnerability detection instances. According to the authors, connected devices have significantly increased user vulnerability to automated cyberattacks and large-scale malicious campaigns.

### Scale of Attacks: Billions of Login and Brute-Force Attempts

During the study period, 4.85 billion login attempts targeting home routers were recorded—averaging two attempts per day for each device. Additionally, 466.6 million brute-force password attempts were detected. The report also examines major incidents, including the dismantling of four IoT botnets by order of the U.S. Department of Justice and the discovery of software in smart TV applications turning them into proxy servers.

### Four Attack Scenarios and Vulnerability Leaders

In modern realities, a single device can simultaneously act as the target of four scenarios: a direct attack, transformation into a proxy server, a sensor for information gathering, and an entry point into the network. Among all device categories, smart TVs took first place, as they can combine all four roles—recording 270.3 million vulnerability instances. The most vulnerable devices turned out to be smart TVs (22.7%), smart plugs (22.4%), and NAS network-attached storage devices (22%); combined, they account for 67.1% of identified vulnerabilities.

### Dynamics: What Changed Over the Year

The number of internet-connected devices continues to grow: households average 24 connected devices compared to 22 a year earlier. Meanwhile, reconnaissance has become the primary type of attack, accounting for 90.1% of all recorded incidents. Automated scanning systems search for poorly protected networks and devices to use them for larger-scale attacks or to incorporate them into botnets. A year earlier, streaming devices (25.9%) and smart TVs (21.3%) led in vulnerability; current data indicates that long-service-life equipment, which is rarely replaced and often left connected to the network even after updates and support end, faces the highest risk.

### Types of Vulnerabilities and Consequences

Almost all identified vulnerabilities are publicly known: in 99.7% of cases, corresponding entries already exist in registries, while weak passwords and credential transmission account for only fractions of a percent. Attacks most frequently trigger memory errors and operational disruptions: buffer overflows account for about 54% of incidents, followed by denial of service (about 18%) and memory corruption (about 17%). The most dangerous consequences, allowing attackers to gain control over hardware, are less common: privilege escalation (5.3%), arbitrary code execution (3.8%), and information access (1.2%)—totaling around 10.3%. Among the most common connected devices, smartphones lead (20.4%), followed by TVs (10.6%), computers (10.0%), streaming devices (5.4% in 2026 compared to 7.3% in 2025), networking equipment (6.2%), tablets (4.8%), and IP cameras (4.1%).

## Fact-Check & Sources

- [Миллиарды попыток взлома домашних сетей: телевизоры, розетки и NAS стали главными мишенями хакеров window-new](https://3dnews.ru/1150649/milliardi-popitok-vzloma-domashnih-setey-televizori-rozetki-i-nas-stali-glavnimi-mishenyami-hakerov) - Primary source: full figures on 10.4 million homes, 5.4 billion events, 4.85 billion login attempts, 466.6 million password brute-force attempts, and vulnerability shares by category and attack type.
- [Миллиарды попыток взлома домашних сетей: телевизоры, розетки и NAS стали главными мишенями ...](https://azertag.az/ru/xeber/milliardy_popytok_vzloma_domashnih_setei_televizory_rozetki_i_nas_stali_glavnymi_mishenyami_hakerov___issledovanie-4488036) - Independent confirmation of key figures (10.4 million homes, 5.4 billion events, 4.85 billion login attempts, 22.7/22.4/22% by category). No discrepancies with the primary source.

## FAQ

### How many home network hacking attempts were recorded in the study?

From January to September 2026, 4.85 billion login attempts targeting home routers and 466.6 million password brute-force attempts were recorded—averaging two login attempts per day per device.

### Which devices turned out to be the most vulnerable?

Smart TVs led with 22.7% of detected vulnerabilities, followed by smart plugs (22.4%) and NAS network storage (22%); together they account for 67.1% of all vulnerabilities.

### What are the four attack scenarios for a single device?

A device can be the subject of a direct attack, turned into a proxy server, used as a sensor for gathering data, and used as an entry point into the network. Smart TVs can combine all four roles.

### How dangerous are the discovered vulnerabilities?

In 99.7% of cases, vulnerabilities are already known and cataloged. The most dangerous consequences—privilege escalation, arbitrary code execution, and data access—collectively account for about 10.3% of incidents.