Overclock.net › Forums › Industry News › Technology and Science News › [Ars] Hackers hijack 300,000-plus wireless routers, make malicious changes
New Posts  All Forums:Forum Nav:

[Ars] Hackers hijack 300,000-plus wireless routers, make malicious changes

post #1 of 10
Thread Starter 
Quote:

 

 
 
Researchers said they have uncovered yet another mass compromise of home and small-office wireless routers, this one being used to make malicious configuration changes to more than 300,000 devices made by D-Link, Micronet, Tenda, TP-Link, and others.
 
The hackers appear to be using a variety of techniques to commandeer the devices and make changes to the domain name system (DNS) servers used to translate human-friendly domain names into the IP addresses computers use to locate their Web servers, according to a report published Monday by researchers from security firm Team Cymru. Likely hacks include a recently disclosed cross-site request forgery (CSRF) that allows attackers to inject a blank password into the Web interface of TP-Link routers. Other attack techniques may include one that allows wireless WPA/WPA2 passwords and other settings to be remotely changed.

 

Source

 

 

Previous News

 
≡ Snowbaru ≡
(17 items)
 
 
CPUMotherboardGraphicsGraphics
Core i7 3930K 4.9Ghz Asus Sabertooth X79 EVGA GTX TITAN 1250Mhz KPE/Hybrid BIOS (SOLD) NVIDIA Geforce GTX 1080 Ti Founder Edition 
RAMHard DriveHard DriveHard Drive
32GB Samsung 30nm 2400Mhz OCZ Vertex 4 Samsung 850 EVO 13000GB HDDs 
CoolingOSMonitorKeyboard
EKWB Custom Watercooling, XSPC, Bitpower, Primo... Windows 10 Pro x64 (1607) ASUS PG278Q G-SYNC (2560x1440) Logitech G910 Onion Spark 
PowerCaseMouseMouse Pad
EVGA SuperNOVA 850G2 Gold Fractal Design Define S Logitech G502 Logitech G440 
AudioOtherOtherOther
Logitech G933 Xbox One Controller Asus RT-AC68U Hitron CDA3 
CPUCPUMotherboardGraphics
5HP 5HP 5HP 5HP 
RAMHard DriveOptical DriveCooling
5HP 5HP 5HP 5HP 
OSMonitorKeyboardPower
5HP 5HP 5HP 5HP 
CaseMouseMouse PadAudio
5HP 5HP 5HP 5HP 
Other
5HP 
  hide details  
Reply
 
≡ Snowbaru ≡
(17 items)
 
 
CPUMotherboardGraphicsGraphics
Core i7 3930K 4.9Ghz Asus Sabertooth X79 EVGA GTX TITAN 1250Mhz KPE/Hybrid BIOS (SOLD) NVIDIA Geforce GTX 1080 Ti Founder Edition 
RAMHard DriveHard DriveHard Drive
32GB Samsung 30nm 2400Mhz OCZ Vertex 4 Samsung 850 EVO 13000GB HDDs 
CoolingOSMonitorKeyboard
EKWB Custom Watercooling, XSPC, Bitpower, Primo... Windows 10 Pro x64 (1607) ASUS PG278Q G-SYNC (2560x1440) Logitech G910 Onion Spark 
PowerCaseMouseMouse Pad
EVGA SuperNOVA 850G2 Gold Fractal Design Define S Logitech G502 Logitech G440 
AudioOtherOtherOther
Logitech G933 Xbox One Controller Asus RT-AC68U Hitron CDA3 
CPUCPUMotherboardGraphics
5HP 5HP 5HP 5HP 
RAMHard DriveOptical DriveCooling
5HP 5HP 5HP 5HP 
OSMonitorKeyboardPower
5HP 5HP 5HP 5HP 
CaseMouseMouse PadAudio
5HP 5HP 5HP 5HP 
Other
5HP 
  hide details  
Reply
post #2 of 10
I wonder how many people know how to check the DNS settings on their router.

DD-WRT FTW.
Millenium Falcon
(24 items)
 
  
CPUMotherboardGraphicsRAM
Core i7 4930k MSI Big Bang Xpower II EVGA GTX 690 Patriot Viper II Sector 7 
Hard DriveHard DriveHard DriveHard Drive
OCZ Deneva 2 Corsair Force 3 Maxtor Western Digital Green 
Optical DriveCoolingCoolingCooling
Samsung BD/DVD-RW Swiftech MCP655 x2 Black Ice GTX 480 Black Ice GTX 280 
CoolingCoolingCoolingCooling
Alphacool Repack Dual D5 Watercool Heatkiller 3.0 Alphacool GTX 690 fullcover Bitspower Big Bang Xpower II fullcover 
OSMonitorKeyboardPower
Windows 8.1 64-bit Professional 3x Dell S2340 Max Keyboard Durandal CoolerMaster V1000 
CaseMouseMouse PadAudio
Azza Genesis 9000B Logitech G700 Roccat Alumic Onkyo HT-S9100THX 
  hide details  
Reply
Millenium Falcon
(24 items)
 
  
CPUMotherboardGraphicsRAM
Core i7 4930k MSI Big Bang Xpower II EVGA GTX 690 Patriot Viper II Sector 7 
Hard DriveHard DriveHard DriveHard Drive
OCZ Deneva 2 Corsair Force 3 Maxtor Western Digital Green 
Optical DriveCoolingCoolingCooling
Samsung BD/DVD-RW Swiftech MCP655 x2 Black Ice GTX 480 Black Ice GTX 280 
CoolingCoolingCoolingCooling
Alphacool Repack Dual D5 Watercool Heatkiller 3.0 Alphacool GTX 690 fullcover Bitspower Big Bang Xpower II fullcover 
OSMonitorKeyboardPower
Windows 8.1 64-bit Professional 3x Dell S2340 Max Keyboard Durandal CoolerMaster V1000 
CaseMouseMouse PadAudio
Azza Genesis 9000B Logitech G700 Roccat Alumic Onkyo HT-S9100THX 
  hide details  
Reply
post #3 of 10
Quote:
Originally Posted by Tsumi View Post

I wonder how many people know how to check the DNS settings on their router.

DD-WRT FTW.

Not me. It then again I don't own or pay for my internet so I have no say in making security changes or anything anyway.
The Sleeper
(10 items)
 
 
Sony Xperia Z3
(7 items)
 
CPUMotherboardGraphicsGraphics
AMD FX 8320  Asus Sabertooth 990FX R2.0 MSI Radeon 7950 MSI Radeon 7950 
RAMHard DriveCoolingOS
8GB Crucial Ballistix Sport 1600mhz Samsung 470 SSD Corsair H80i Windows 7 64 Bit Home Premium 
PowerCase
Corsair HX850 Coolermaster HAF 932 
CPUMotherboardGraphicsRAM
Intel SU7300 Core2Duo 1.6 Ghz Alienware OEM Nvidia 335m 8 GB PNY memory 
Hard DriveOSMonitor
Samsing 840 SSD Windows 7 Home Premium 64-Bit Generic PNP monitor @ 75hz 
CPUGraphicsRAMHard Drive
Snapdragon 801 @ 2.5 Ghz Adreno 330 3 GB 32 GB  
CoolingOSMonitor
Blow on it Android 4.4.4 1920x1080 LCD 
  hide details  
Reply
The Sleeper
(10 items)
 
 
Sony Xperia Z3
(7 items)
 
CPUMotherboardGraphicsGraphics
AMD FX 8320  Asus Sabertooth 990FX R2.0 MSI Radeon 7950 MSI Radeon 7950 
RAMHard DriveCoolingOS
8GB Crucial Ballistix Sport 1600mhz Samsung 470 SSD Corsair H80i Windows 7 64 Bit Home Premium 
PowerCase
Corsair HX850 Coolermaster HAF 932 
CPUMotherboardGraphicsRAM
Intel SU7300 Core2Duo 1.6 Ghz Alienware OEM Nvidia 335m 8 GB PNY memory 
Hard DriveOSMonitor
Samsing 840 SSD Windows 7 Home Premium 64-Bit Generic PNP monitor @ 75hz 
CPUGraphicsRAMHard Drive
Snapdragon 801 @ 2.5 Ghz Adreno 330 3 GB 32 GB  
CoolingOSMonitor
Blow on it Android 4.4.4 1920x1080 LCD 
  hide details  
Reply
post #4 of 10
Thread Starter 

DDWRT here with OpenDNS auto sync setup. Sad thing not many people read tech blogs such as grandparents or casual users will not know about this at all. 99% users are exposed to this threats. Also many router are not autoupdate anyways. Some requires user to update by themselves and many doesn't even know how to or where to look.

 
≡ Snowbaru ≡
(17 items)
 
 
CPUMotherboardGraphicsGraphics
Core i7 3930K 4.9Ghz Asus Sabertooth X79 EVGA GTX TITAN 1250Mhz KPE/Hybrid BIOS (SOLD) NVIDIA Geforce GTX 1080 Ti Founder Edition 
RAMHard DriveHard DriveHard Drive
32GB Samsung 30nm 2400Mhz OCZ Vertex 4 Samsung 850 EVO 13000GB HDDs 
CoolingOSMonitorKeyboard
EKWB Custom Watercooling, XSPC, Bitpower, Primo... Windows 10 Pro x64 (1607) ASUS PG278Q G-SYNC (2560x1440) Logitech G910 Onion Spark 
PowerCaseMouseMouse Pad
EVGA SuperNOVA 850G2 Gold Fractal Design Define S Logitech G502 Logitech G440 
AudioOtherOtherOther
Logitech G933 Xbox One Controller Asus RT-AC68U Hitron CDA3 
CPUCPUMotherboardGraphics
5HP 5HP 5HP 5HP 
RAMHard DriveOptical DriveCooling
5HP 5HP 5HP 5HP 
OSMonitorKeyboardPower
5HP 5HP 5HP 5HP 
CaseMouseMouse PadAudio
5HP 5HP 5HP 5HP 
Other
5HP 
  hide details  
Reply
 
≡ Snowbaru ≡
(17 items)
 
 
CPUMotherboardGraphicsGraphics
Core i7 3930K 4.9Ghz Asus Sabertooth X79 EVGA GTX TITAN 1250Mhz KPE/Hybrid BIOS (SOLD) NVIDIA Geforce GTX 1080 Ti Founder Edition 
RAMHard DriveHard DriveHard Drive
32GB Samsung 30nm 2400Mhz OCZ Vertex 4 Samsung 850 EVO 13000GB HDDs 
CoolingOSMonitorKeyboard
EKWB Custom Watercooling, XSPC, Bitpower, Primo... Windows 10 Pro x64 (1607) ASUS PG278Q G-SYNC (2560x1440) Logitech G910 Onion Spark 
PowerCaseMouseMouse Pad
EVGA SuperNOVA 850G2 Gold Fractal Design Define S Logitech G502 Logitech G440 
AudioOtherOtherOther
Logitech G933 Xbox One Controller Asus RT-AC68U Hitron CDA3 
CPUCPUMotherboardGraphics
5HP 5HP 5HP 5HP 
RAMHard DriveOptical DriveCooling
5HP 5HP 5HP 5HP 
OSMonitorKeyboardPower
5HP 5HP 5HP 5HP 
CaseMouseMouse PadAudio
5HP 5HP 5HP 5HP 
Other
5HP 
  hide details  
Reply
post #5 of 10
Thread Starter 
Quote:
Originally Posted by Deadboy90 View Post
 
Quote:
Originally Posted by Tsumi View Post

I wonder how many people know how to check the DNS settings on their router.

DD-WRT FTW.

Not me. It then again I don't own or pay for my internet so I have no say in making security changes or anything anyway.

 

Tell them and show them this article. "Do you want to get your bank info stolen?"

 
≡ Snowbaru ≡
(17 items)
 
 
CPUMotherboardGraphicsGraphics
Core i7 3930K 4.9Ghz Asus Sabertooth X79 EVGA GTX TITAN 1250Mhz KPE/Hybrid BIOS (SOLD) NVIDIA Geforce GTX 1080 Ti Founder Edition 
RAMHard DriveHard DriveHard Drive
32GB Samsung 30nm 2400Mhz OCZ Vertex 4 Samsung 850 EVO 13000GB HDDs 
CoolingOSMonitorKeyboard
EKWB Custom Watercooling, XSPC, Bitpower, Primo... Windows 10 Pro x64 (1607) ASUS PG278Q G-SYNC (2560x1440) Logitech G910 Onion Spark 
PowerCaseMouseMouse Pad
EVGA SuperNOVA 850G2 Gold Fractal Design Define S Logitech G502 Logitech G440 
AudioOtherOtherOther
Logitech G933 Xbox One Controller Asus RT-AC68U Hitron CDA3 
CPUCPUMotherboardGraphics
5HP 5HP 5HP 5HP 
RAMHard DriveOptical DriveCooling
5HP 5HP 5HP 5HP 
OSMonitorKeyboardPower
5HP 5HP 5HP 5HP 
CaseMouseMouse PadAudio
5HP 5HP 5HP 5HP 
Other
5HP 
  hide details  
Reply
 
≡ Snowbaru ≡
(17 items)
 
 
CPUMotherboardGraphicsGraphics
Core i7 3930K 4.9Ghz Asus Sabertooth X79 EVGA GTX TITAN 1250Mhz KPE/Hybrid BIOS (SOLD) NVIDIA Geforce GTX 1080 Ti Founder Edition 
RAMHard DriveHard DriveHard Drive
32GB Samsung 30nm 2400Mhz OCZ Vertex 4 Samsung 850 EVO 13000GB HDDs 
CoolingOSMonitorKeyboard
EKWB Custom Watercooling, XSPC, Bitpower, Primo... Windows 10 Pro x64 (1607) ASUS PG278Q G-SYNC (2560x1440) Logitech G910 Onion Spark 
PowerCaseMouseMouse Pad
EVGA SuperNOVA 850G2 Gold Fractal Design Define S Logitech G502 Logitech G440 
AudioOtherOtherOther
Logitech G933 Xbox One Controller Asus RT-AC68U Hitron CDA3 
CPUCPUMotherboardGraphics
5HP 5HP 5HP 5HP 
RAMHard DriveOptical DriveCooling
5HP 5HP 5HP 5HP 
OSMonitorKeyboardPower
5HP 5HP 5HP 5HP 
CaseMouseMouse PadAudio
5HP 5HP 5HP 5HP 
Other
5HP 
  hide details  
Reply
post #6 of 10
When I go visit my parents I take the wife's laptop or my iPad to connect to their internet, and I always find neighbors networks, that are unsecured. There are so many people don't even know how to choose a secure setting it's amazing. But even I take things for granted, I don't even know who makes my router since it was supplied by my ISP. Guess I better take a look.
Longterm upgrader
(19 items)
 
   
CPUMotherboardGraphicsRAM
Phenom 965 BE ASRock Fatal1ty 990FX Killer MSI R9 285 Gaming Team Xtreme 16GB 
Hard DriveHard DriveOptical DriveCooling
seagate SATA intel ssd Sony DVD Burner Corsair H110 
CoolingOSMonitorMonitor
140mm case fan x2 Windows 7 Insignia LG L1932TQ 
KeyboardPowerCaseMouse
Microsoft Natural Ergonomic 4000 OCZ 750w Fatality Fractal Design Define R4 Tt esport Talon 
Mouse PadAudio
yes Logitech 5.1 
  hide details  
Reply
Longterm upgrader
(19 items)
 
   
CPUMotherboardGraphicsRAM
Phenom 965 BE ASRock Fatal1ty 990FX Killer MSI R9 285 Gaming Team Xtreme 16GB 
Hard DriveHard DriveOptical DriveCooling
seagate SATA intel ssd Sony DVD Burner Corsair H110 
CoolingOSMonitorMonitor
140mm case fan x2 Windows 7 Insignia LG L1932TQ 
KeyboardPowerCaseMouse
Microsoft Natural Ergonomic 4000 OCZ 750w Fatality Fractal Design Define R4 Tt esport Talon 
Mouse PadAudio
yes Logitech 5.1 
  hide details  
Reply
post #7 of 10
Quote:
Originally Posted by Tsumi View Post

I wonder how many people know how to check the DNS settings on their router.

DD-WRT FTW.

Quote:
Originally Posted by djriful View Post

DDWRT here with OpenDNS auto sync setup. Sad thing not many people read tech blogs such as grandparents or casual users will not know about this at all. 99% users are exposed to this threats. Also many router are not autoupdate anyways. Some requires user to update by themselves and many doesn't even know how to or where to look.

Pfft... pfSense or go home.
    
CPUMotherboardGraphicsRAM
Q8400 DFI LP DK P45-T2RS eVGA GTX 650 Kingston 
Hard DriveOptical DriveOSMonitor
2.8TB Total LG Super DVD Burner SATA VII Enterprise x64 Gateway FHD2401 
PowerCaseMouseMouse Pad
Corsair VX550W NZXT Source 210 White Logitech G400 Razer Kabuto 
Audio
Creative Audigy 
  hide details  
Reply
    
CPUMotherboardGraphicsRAM
Q8400 DFI LP DK P45-T2RS eVGA GTX 650 Kingston 
Hard DriveOptical DriveOSMonitor
2.8TB Total LG Super DVD Burner SATA VII Enterprise x64 Gateway FHD2401 
PowerCaseMouseMouse Pad
Corsair VX550W NZXT Source 210 White Logitech G400 Razer Kabuto 
Audio
Creative Audigy 
  hide details  
Reply
post #8 of 10
Thread Starter 
Quote:
Originally Posted by legoman786 View Post
 
Quote:
Originally Posted by Tsumi View Post

I wonder how many people know how to check the DNS settings on their router.

DD-WRT FTW.
 
Quote:
Originally Posted by djriful View Post

DDWRT here with OpenDNS auto sync setup. Sad thing not many people read tech blogs such as grandparents or casual users will not know about this at all. 99% users are exposed to this threats. Also many router are not autoupdate anyways. Some requires user to update by themselves and many doesn't even know how to or where to look.

Pfft... pfSense or go home.

dont have a spare pc 

 
≡ Snowbaru ≡
(17 items)
 
 
CPUMotherboardGraphicsGraphics
Core i7 3930K 4.9Ghz Asus Sabertooth X79 EVGA GTX TITAN 1250Mhz KPE/Hybrid BIOS (SOLD) NVIDIA Geforce GTX 1080 Ti Founder Edition 
RAMHard DriveHard DriveHard Drive
32GB Samsung 30nm 2400Mhz OCZ Vertex 4 Samsung 850 EVO 13000GB HDDs 
CoolingOSMonitorKeyboard
EKWB Custom Watercooling, XSPC, Bitpower, Primo... Windows 10 Pro x64 (1607) ASUS PG278Q G-SYNC (2560x1440) Logitech G910 Onion Spark 
PowerCaseMouseMouse Pad
EVGA SuperNOVA 850G2 Gold Fractal Design Define S Logitech G502 Logitech G440 
AudioOtherOtherOther
Logitech G933 Xbox One Controller Asus RT-AC68U Hitron CDA3 
CPUCPUMotherboardGraphics
5HP 5HP 5HP 5HP 
RAMHard DriveOptical DriveCooling
5HP 5HP 5HP 5HP 
OSMonitorKeyboardPower
5HP 5HP 5HP 5HP 
CaseMouseMouse PadAudio
5HP 5HP 5HP 5HP 
Other
5HP 
  hide details  
Reply
 
≡ Snowbaru ≡
(17 items)
 
 
CPUMotherboardGraphicsGraphics
Core i7 3930K 4.9Ghz Asus Sabertooth X79 EVGA GTX TITAN 1250Mhz KPE/Hybrid BIOS (SOLD) NVIDIA Geforce GTX 1080 Ti Founder Edition 
RAMHard DriveHard DriveHard Drive
32GB Samsung 30nm 2400Mhz OCZ Vertex 4 Samsung 850 EVO 13000GB HDDs 
CoolingOSMonitorKeyboard
EKWB Custom Watercooling, XSPC, Bitpower, Primo... Windows 10 Pro x64 (1607) ASUS PG278Q G-SYNC (2560x1440) Logitech G910 Onion Spark 
PowerCaseMouseMouse Pad
EVGA SuperNOVA 850G2 Gold Fractal Design Define S Logitech G502 Logitech G440 
AudioOtherOtherOther
Logitech G933 Xbox One Controller Asus RT-AC68U Hitron CDA3 
CPUCPUMotherboardGraphics
5HP 5HP 5HP 5HP 
RAMHard DriveOptical DriveCooling
5HP 5HP 5HP 5HP 
OSMonitorKeyboardPower
5HP 5HP 5HP 5HP 
CaseMouseMouse PadAudio
5HP 5HP 5HP 5HP 
Other
5HP 
  hide details  
Reply
post #9 of 10
I read the article, very interesting. I just wanted to clarify though. this exploit is done through java script from a home 'pc' to a home router internally.

So,

a. If your running no script does this help
b. what sort of website would the malware be present on? I generally only visit a few sites such as this nothing dodgy.
post #10 of 10
Quote:
Originally Posted by djriful View Post

dont have a spare pc 

Run it as a virtual machine then.
Going Blue
(22 items)
 
My Minecraft Box
(14 items)
 
 
CPUMotherboardGraphicsRAM
Xeon X5690 EVGA 132-BL-E758 EVGA GTX 970 Crucial Ballistix Tactical 3x8GB 
Hard DriveHard DriveHard DriveHard Drive
Kingston V300 120GB Seagate Sata II 1TB Seagate Sata II 500GB WD Sata II 500GB 
Hard DriveCoolingCoolingCooling
Crucial MX200 500GB Corsair H80i XIGMATEK XAF-F1255 Lian Li EX-36A1 
OSMonitorKeyboardPower
Windows 7 Ultimate SP1 64bit Dell 2009W IBM Model M Seasonic SS-660XP2 
CaseMouseMouse PadAudio
Semi Custom Logitech g400 SteelSeries QcK HD598 
OtherOther
CyberPower PFC MNPA19-XTR 10gb 
  hide details  
Reply
Going Blue
(22 items)
 
My Minecraft Box
(14 items)
 
 
CPUMotherboardGraphicsRAM
Xeon X5690 EVGA 132-BL-E758 EVGA GTX 970 Crucial Ballistix Tactical 3x8GB 
Hard DriveHard DriveHard DriveHard Drive
Kingston V300 120GB Seagate Sata II 1TB Seagate Sata II 500GB WD Sata II 500GB 
Hard DriveCoolingCoolingCooling
Crucial MX200 500GB Corsair H80i XIGMATEK XAF-F1255 Lian Li EX-36A1 
OSMonitorKeyboardPower
Windows 7 Ultimate SP1 64bit Dell 2009W IBM Model M Seasonic SS-660XP2 
CaseMouseMouse PadAudio
Semi Custom Logitech g400 SteelSeries QcK HD598 
OtherOther
CyberPower PFC MNPA19-XTR 10gb 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Technology and Science News
Overclock.net › Forums › Industry News › Technology and Science News › [Ars] Hackers hijack 300,000-plus wireless routers, make malicious changes