Contact us today!

FRS Pros Blog

Could Your Router be Infected with Malware?

Could Your Router be Infected with Malware?

Certain threats out there are dangerous enough to cause major entities to warn against them. In particular, a recent malware by the name of VPNFilter has been deemed dangerous and prevalent enough that the FBI has addressed it. Since the malware targets routers (probably not your first guess in terms of possible vulnerabilities), it has considerable potential to become a nuisance for your organization.

Understanding VPNFilter
VPNFilter is a malware that hides in your router and remains even if you restart the device. VPNFilter is known for prioritizing devices in Ukraine, but you should never count on the trend to protect you from known threats. It’s thought that the VPNFilter malware has its roots in a group called Sofacy, and the malware operates in three basic steps.

The first step for this malware is that it installs itself on the device and remains there even in the event that the router is rebooted or turned off. Second, the malware will install certain permissions on the router that allows it to change settings, manage files, and execute commands. The router can then proceed to brick itself, making it much more difficult for your organization to keep operations moving along. In its final stages, this malware lets a hacker see the data packets that are being sent to and from your organization’s device, meaning that they can then also issue commands and communicate with the device via a Tor web browser.

This threat was specifically mentioned by the FBI because of its persistence. While resetting the device will disable the second and third steps, the first will remain, creating an endless cycle if you don’t do anything about it.

Is Your Router Affected?
Even though not all routers are affected, the number is still quite considerable. Here is a list of affected brands:

  • Asus
  • D-Link
  • Huawei
  • Linksys
  • MikroTik
  • Netgear
  • TP-Link
  • Ubiquiti
  • Upvel
  • ZTE

If you would like a more comprehensive list of all affected devices, Symantec has a list on their website:

How You Fix It
There is an easy fix to VPNFilter, and it’s to perform a factory reset on your router. This eliminates anything that’s currently installed from the first stage of VPNFilter’s attack. Of course, it’s also worth mentioning that the manufacturer of the router may have also administered a patch or security update resolving the vulnerability, so be sure to check for that as well so that it will never be an issue again.

For more great updates and tech tips, be sure to subscribe to FRS Pros’s blog.

Tip of the Week: Changing Your Network Profile
Why (and How) SMBs Should Strategically Adopt Tech...


No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Saturday, September 22 2018

Captcha Image

Mobile? Grab this Article!


Tag Cloud

Tip of the Week Security Technology Best Practices Privacy Internet Network Security Business Management Cloud Business Computing Google Tech Term Software User Tips Hackers Malware Hardware Microsoft Computer Cybersecurity Mobile Devices Windows Hosted Solutions Data Backup Efficiency Apps Browser Productivity Smartphone Innovation Cybercrime Operating System Data Recovery Internet of Things Smartphones Data Security Android Data Mobile Device Management Money Business Office 365 Vulnerability Alert Email Law Enforcement Phishing Ransomware Backup Outsourced IT Business Continuity Chrome Windows 10 IT Services VoIP Server Microsoft Office Managed IT Services Collaboration Best Practice Network Disaster Recovery IT Support IT Support Saving Money Google Drive Computers Unsupported Software Virtualization Upgrade Communications Blockchain App Two-factor Authentication Cloud Computing Spam Telephone Systems Information Technology Gadgets Tech Support Small Business Managed Service Provider Information Employer-Employee Relationship Router Windows 10 Managed IT Applications Hosted Solution Augmented Reality Users Commerce Avoiding Downtime WannaCry Travel Google Assistant Application Budget Excel Wireless Technology Fraud Data Management Communication Safety Artificial Intelligence Proactive IT SaaS Productivity Holiday Government User Error Data Storage Sports Risk Management Cortana Passwords Networking Robot WiFi Miscellaneous Mobile Device OneNote The Internet of Things Social Media Password Wi-Fi Automation Audit Update VPN iPhone Shortcut Data Protection Patch Management Wireless Charging Politics Google Docs Facebook Managed Service Hacking Devices Gmail BDR Bring Your Own Device Save Money Data Breach Mobile Security Quick Tips Cost Management Managed IT Services PowerPoint Settings Marketing BYOD Files Credit Cards App store Samsung Vendor Wireless DDoS Google Maps Spyware Disaster Specifications Virus Mobility Recovery Microsoft Word Search File Sharing Hybrid Cloud Laptop IT Solutions Legal Identity Transportation Wireless Internet Webinar Antivirus Employee-Employer Relationship Private Cloud Apple Encryption Consultant Sales Proactive Administrator Tablets Maintenance Value Storage Social Engineering Amazon Touchpad Streaming Media Sync Evernote Data Privacy Going Green Social Remote Monitoring Lithium-ion battery Gamification IT solutions FAQ Business Technology Edge Touchscreen Retail Websites Software as a Service Access NFL eWaste Emergency Identities Point of Sale Virtual Assistant Humor iOS WIndows Server 2008 Chromecast Hard Drive Memory Windows 10s HBO Charger Testing Telephony Data Loss Ciminal Screen Mirroring Conferencing Data Theft Identity Theft Bandwidth Computer Care Nanotechnology Internet Exlporer Word Device Security Computer Forensics Legislation Language Alexa for Business Adobe Workers Chromebook Unified Threat Management Project Management Financial Solid State Drive Camera Reputation Meetings Uninterrupted Power Supply Data storage Emails Cast Gifts Computing Workplace Tips Vendor Management History Root Cause Analysis Windows Ink Management Comparison Computer Fan Licensing Updates Printing Remote Computing Health Upgrades Microsoft Excel IT budget Hard Disk Drive IT Management Outlook Projects Work/Life Balance Virtual Reality Crowdsourcing Employer Employee Relationship Compliance Current Events Electronic Medical Records Benefits Office tips es Phone System Printers Cache Advertising Save Time Computer Accessories Regulation Training Monitors Battery Smart Technology Flexibility Music Hacker Television CrashOverride Thank You Instant Messaging End of Support Company Culture HaaS Twitter Scalability Analytics Relocation Keyboard Entertainment Congratulations Personal Information Black Market Cleaning Automobile Office Big Data Managing Stress PDF Mobile Computing USB Worker Scam How To Books Education Hiring/Firing Text Messaging Video Games Experience