The FBI Says Reboot Your Router!

Have you seen the notices from the FBI and Department of Justice?

The FBI has been recommending that small office and home wireless routers be re-booted due to attacks by state-sponsored hackers. However just doing that may really not be enough.

The warning is based on intelligence reports that say over 500,000 public and private WiFi networks in more than 50 countries have been infected by a sophisticated malware program called “VPNFilter.”

The malware looks very much like malware that was responsible for large-scale attacks in Ukraine.

Should you reboot your router like the FBI recommends?

The malware may have been created by the same nefarious groups that hacked into the Democratic Committee in 2016 and the malware is capable of blocking web traffic, collecting information that passes through home and office routers and disabling the devices entirely.

Virtually all known router vendors are vulnerable, including Linksys, Netgear, TP-Link, QNAP and MicroTek, which are popular in small and home offices.

The behavior of this malware is very concerning, as components of the malware can cause theft of website credentials and other Internet Security protocols.

It has a destructive capability that can render any of your devices unusable, or the potential of turning off your Internet connection (or hundreds of thousands of them) around the world which would be devastating during times of unrest or political turmoil.

That’s why the FBI making this unusual request is so important, but they acknowledge that a quick re-boot may only “temporarily disrupt the malware.”

An anti-virus package on your computer may protect your computer, but this malware targets your wifi network before it ever touches your PC, laptop, tablet or smartphone. Older devices are even more susceptible to malware attacks.

The One Thing About This Malware

The FBI has suggested that simply rebooting your wireless router will remove the malware. If only it were that easy.

There can be some minimal short-lasting benefits pertaining to file collection, command execution and device management. But some versions of the malware ALSO HAVE SELF-DESTRUCT COMMANDS that will permanently destroy your router.

Even worse, one stage of this malware logs your router’s IP address, which may allow it to be added back to the devise easily. The FBI thinks they have stopped this ability, but we don’t really know.

Tech website CNET said the FBI’s instructions are “somewhat vague.” The website said that rebooting, or turning your router on and off can’t hurt. However, CNET cited a report by Cisco which said restarting alone won’t do the trick. Cisco’s report said VPNFilter can survive until the affected device is reset to its factory-default settings, but that may also require users to reconfigure all network settings.

It’s a Never-Ending Problem!

Questions?

“How can I tell if my router is infected?” You probably can’t. Most people lack the ability to access the these devices and determine vulnerability. There are publicly-known vulnerabilities that aren’t easy for the general public to patch.

“If I update my router’s firmware, will that fix the problem?” Maybe. It won’t hurt and it may help, but it may not cure all your computer and network problems. Users are also advised to set a new secure password, especially if you’re still suing the default password. And if any remote-management settings are in place, the FBI suggests you consider disabling them.

It seems like there is cybersecurity news every day, from hackers watching you using your webcam, to bank accounts and credit cards being compromised or even having the kid next door stealing your WiFi, which slows your access down!

Don’t Take a Chance

If your Internet connection goes down, how would that affect your life or your business?

Make sure your wireless router is fully secured.

Make sure that no other viruses are lurking inside your laptops and desktops

Let us look at why your computer may have slowed down.

Enjoy Peace of Mind and Better Productivity

Make sure your confidential information is secure!

Go One2One!

Talk to Gregg Eisel at 630.854.4121

Email: Gregg @ GoOne2One.com