The Agora => UK & World News => Going Geek info => Topic started by: Maik on Wednesday, 30 May, 2018 @ 03:30:26

Title: Reset your router
Post by: Maik on Wednesday, 30 May, 2018 @ 03:30:26
Turn your router off now, says FBI after Russian malware discovered taking over the internet

People should turn their routers off and back on again to help halt the spread of a dangerous piece of Russian malware (https://www.independent.co.uk/life-style/gadgets-and-tech/news/russian-hackers-fancy-bear-vpnfilter-internet-routers-a8366801.html), the FBI has said.

The software has infected hundreds of thousands of devices. It could use that army of routers under its control to collect information by reading people's internet activity, or to shut down their internet entirely.

Turning off the routers and then switching them back again – as well as updating the devices and ensuring that passwords are safe – could not only fix the problem but also allow authorities to track down where the problem has spread.

Reboot Your Router to remove VPNFilter? Why It's Not Enough

Unfortunately... many people heard the reboot part, but did not read the rest of the recommendations of turning off remote administration, changing passwords, and upgrading to the latest firmware. One step that was not mentioned is the fact that the only way to truly remove VPNFilter is to reset the router to factory defaults.

Due to this, people are just resetting their routers, but leaving part of the malware still present after it is rebooted. With that said, I have put together a guide on VPNFilter, what the FBI advisory is about, and the steps you should perform to clean and secure your router.

The only real way to fully remove this infection is to reset your router back to factory defaults, which will also reboot the router. Unfortunately, this process will require you to setup your router again, add an admin password, and setup any wireless networks that are configured.

Should you reset your router even if its not one of the listed ones?

This is a tough one. On one hand, its always better to be safe than sorry. On the other, for some it can be very difficult to configure a router from scratch.

There's a list of modem routers known to be vulnerable in the BleepingComputer link above along with links on how to reset your modem router.

Title: Re: Reset your router
Post by: Maik on Wednesday, 13 June, 2018 @ 01:51:52
Check your router – list of routers affected by VPNFilter just got bigger

... this has now been expanded to include at least another 56 from Asus, D-Link, Huawei, Ubiquiti, UPVEL, and ZTE.
Title: Re: Reset your router
Post by: TonyD on Wednesday, 13 June, 2018 @ 09:06:21
It's not made very clear, but if you had already changed the Admin password from it's default setting there's no need to reset your router.