Mavericks Blogs

Did You Know Your Router Can be Infected?

Did You Know Your Router Can be Infected?

A new type of malware is targeting routers in what is considered a large enough threat that even the FBI is addressing it. Even worse, a router isn’t necessarily a device that you think would be vulnerable to attack from a hacker. What can you do to keep your business’ Internet access points secure from hacking attacks? Let’s dig in to the details about what the VPNFilter malware does and how you can address it.

Explaining VPNFilter
The malware in question, VPNFilter, hides in routers for both individual users and small businesses with the intention of persisting even if the device has been rebooted. VPNFilter targets devices that are Ukraine-based most of the time, but others have been known to fall victim to this as well. It’s thought that the VPNFilter malware originated from a group called Sofacy. The malware itself takes three steps to become an issue for your organization.

The first is that the malware sets itself up so that it will persist even if the device is rebooted or turned off. The second stage of the attack consists of the malware installing permissions for itself to change router settings, manage files, and execute commands. This allows the router to essentially brick itself, leading to considerable connectivity problems. The final stage of this malware lets the hackers look at the data packets passing to and from the device, as well as the ability to issue commands and communicate through the Tor web browser.

The reason why the FBI recommends resetting your router is because the second and third steps are wiped when you do so, but the first stage remains regardless.

Is Your Router Affected?
While not all routers are affected, there is still a sizeable list of confirmed contaminated devices. Some of the affected brands include:

  • Asus
  • D-Link
  • Huawei
  • Linksys
  • MikroTik
  • Netgear
  • TP-Link
  • Ubiquiti
  • Upvel
  • ZTE

For a comprehensive list of affected devices, you can see specifics for each brand at Symantec’s website: https://www.symantec.com/blogs/threat-intelligence/vpnfilter-iot-malware

How to Fix It
The best way to resolve these issues with VPNFilter is to perform a factory reset for your router, which completely deletes anything installed during the first stage of the threat. If the router’s manufacturer has administered a patch for the vulnerability, you can also install it following a factory reset so that you’ll never have to deal with this vulnerability again.

For more updates and tips on some of the latest threats, keep an eye on Mavericks’s blog.

 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Friday, September 21 2018

Captcha Image

Mobile? Grab this Article!

QR-Code

Tag Cloud

Tip of the Week Security Technology Best Practices Tech Term Privacy Email Network Security Innovation Internet Cloud Computing Internet of Things Business Computing Data Malware Data recovery Cloud Artificial Intelligence Mobile Devices Saving Money Data Backup Applications IT Services Hosted Solutions Hackers Workplace Tips Windows VoIp Small Business Outsourced IT Communications Hardware Google Android Data Protection Smartphones Connectivity Smartphone BDR User Tips Network Backup Facebook Money Save Money Blockchain Gadgets Windows 10 Infrastructure How To Vulnerability Social Engineering Information Computers Router Two-factor Authentication Paperless Office Password Comparison Sports Managed IT services Cybercrime Managed Service Communication IT Support CES Passwords Identity Theft Business Management Miscellaneous Encryption Business Intelligence Virtual Assistant Content Management Browser VPN Microsoft Remote Work Apps Website Hosted Computing Office 365 Software Online Shopping NIST Wiring Cybersecurity USB Google Apps IT Plan Bring Your Own Device Fraud Collaboration eWaste File Sharing Disaster Recovery Systems Organizations today HIPAA Server Bandwidth YouTube Big Data Data Security Keyboard Cache Telephone System Inventory Document Management Digital Signature OneNote Cryptocurrency Firewall Accountants Work/Life Balance Productivity Wire Business Staff Thought Leadership Computer Social Media data-driven marketplace Electronic Medical Records Nanotechnology Business Mangement BYOD Disaster Recovery Mobile Device PDF Evernote Addiction Safe Mode Unified Threat Management Millennials Cleaning Employer-Employee Relationship Virtualization Amazon Automation Networking Augmented Reality top-line performance Wireless Internet Remote Monitoring Telephone Systems Smart Tech Mobile Device Management Charger IT Management Access Control Entertainment Password Manager Microsoft Office Update Specifications Settings Phishing Workforce Practices Smart Office Workers Amazon Web Services Managed IT Enterprise Content Management Legal Training business intelligence Upgrade Data Management Servers Gmail Managed IT Services Efficiency Wireless Charging Telecommuting Authentication Machine Learning Mobile Computing Ransomware Word Alert Holiday Law Enforcement Password Management Criminal Remote Worker organizations need Windows 7 Cortana Human Resources Credit Cards Devices HVAC Recycling MSP Chrome Quick Tips Compliance Regulation Twitter Camera Company Culture Printers Managing Stress Thank You Congratulations