Secure those routers!

Talk about "WhatEVER !"..
Post Reply
Message
Author
GomJabbar
Moderator
Moderator
Posts: 9765
Joined: Tue Jun 07, 2005 6:57 am

Secure those routers!

#1 Post by GomJabbar » Sun Jul 06, 2008 9:59 am

New Malware Silently Changes Router Settings
PCMAG.COM BLOGS wrote:...a new malware variant with a new twist: It changes the DNS settings on your router so that all of your traffic goes through malicious DNS servers controlled by the attackers.
-----------------------------
...the attack relies on the routers having default usernames and passwords for the admin pages, and on standard file names for those pages. Users who take the wise precaution of changing the router password are not vulnerable to this aspect of the Trojan.
DKB

Purcy
Senior Member
Senior Member
Posts: 921
Joined: Mon Oct 02, 2006 7:29 pm
Location: Pittsburgh PA, USA

#2 Post by Purcy » Sun Jul 06, 2008 11:29 am

Thanks, I just changed my username and password.
IBM T23 (2648-4NU) 1.13Ghz Pentium III, 1GB, 60GB 5400rpm, CD/DVD-RW, Internal Wireless, Windows XP Pro SP2 [DONOR]

leoblob
Senior Member
Senior Member
Posts: 762
Joined: Sat Nov 06, 2004 2:47 pm
Location: Chicago IL USA

#3 Post by leoblob » Sun Jul 06, 2008 8:37 pm

I just changed mine, too. Thanks for the info :)
TP360 • TP365x • i1452 • TP T42 • Intellistation Z Pro

jdhurst
Admin
Admin
Posts: 5831
Joined: Thu Apr 29, 2004 6:49 am
Location: Toronto, Canada

#4 Post by jdhurst » Sun Jul 06, 2008 9:09 pm

Setting a unique and difficult password is the first thing I do with a router. ... JDH

Trekk69
Senior Member
Senior Member
Posts: 520
Joined: Wed Apr 18, 2007 10:59 am
Location: Toronto, Canada

#5 Post by Trekk69 » Mon Jul 07, 2008 5:44 am

Always giving the heads up!
First thing I do is always change the default settings!
X61 Tablet 7767....loving every moment of it

beGi
Senior Member
Senior Member
Posts: 518
Joined: Tue Jan 29, 2008 8:41 am
Location: Pag; Croatia

#6 Post by beGi » Mon Jul 07, 2008 5:58 am

Trekk69 wrote:First thing I do is always change the default settings!

Same here....

carbon_unit
Moderator Emeritus
Moderator Emeritus
Posts: 2988
Joined: Sat Apr 24, 2004 9:10 pm
Location: South Central Iowa, USA

#7 Post by carbon_unit » Mon Jul 07, 2008 6:36 am

Same here. If nothing else I use the customers last name. I know it is not very secure but it is better than "admin" and I can remember it a year later when they need service.
T60 2623-D7U, 3 GB Ram.
Dual boot XP and Linux Mint.
Registered linux user #160145

wearetheborg
Senior Member
Senior Member
Posts: 569
Joined: Sun Oct 22, 2006 1:12 am
Location: San Pablo, California

#8 Post by wearetheborg » Mon Jul 07, 2008 8:07 am

jdhurst wrote:Setting a unique and difficult password is the first thing I do with a router. ... JDH
Me too, ingrained due to the linux culture.
HP NC8000 UXGA; Dell Precision M90 WUXGA; R50P UXGA
Please PM me if you've had experience with SquareTrade warranties

SHoTTa35
ThinkPadder
ThinkPadder
Posts: 1597
Joined: Tue May 29, 2007 6:20 pm
Location: Wash, DC
Contact:

#9 Post by SHoTTa35 » Mon Jul 07, 2008 9:58 am

:shock: , thanks :) Changed!
Current - Thinkpad T410si - Core i3 330m, 4GB, 250GB 5400RPM, WXGA+, FPR, BT, Camera, DVDRW, Gobi2000, Win7 Pro x32
Past - Thinkpad T410 - T400 - T61 - T60 - T43 - T42 - T41 - T40 - T23 - 600X

Temetka
Senior ThinkPadder
Senior ThinkPadder
Posts: 2790
Joined: Fri Sep 30, 2005 3:27 am
Location: Glendora, CA

#10 Post by Temetka » Mon Jul 07, 2008 4:43 pm

I have a real router, none of these little linksys or belkin jobbies for me. That being said the username and pw are of course, not factory default and in todays world anyone who runs with defaults is going to get hurt.

I just got my B.S. in Information Security and having done freelance network security I can tell you its not just the home users who are in the dark about what steps need to be taken in order to properly protect their assets. Anything stored on a machine should be considered a valuable asset whether it music, movies, pics or tax returns. Anything that is valuable better be locked down.

We need a modern mattress to stuff our stuff into to quote my uncle.
New:
Thinkpad T430s 8GB DDR3, 1600x900, 128GB + 250GB SSD's, etc.
Old:
E6520, Precision M4400, D630, Latitude E6520
ThinkPad Tablet 16GB 1838-22U
IBM Thinkpad X61T, T61, T43, X41T, T60, T41P, T42, T410, X301

GomJabbar
Moderator
Moderator
Posts: 9765
Joined: Tue Jun 07, 2005 6:57 am

#11 Post by GomJabbar » Mon Jul 07, 2008 6:24 pm

Yes, I secured my router as soon as I got it. I believe in keeping tight security on any computer device connected to the internet.

I do not store any important financial or ID theft compromising passwords on my computers that have internet access. I do use those computers to access my bank and other accounts, but I do not keep their passwords stored in any software or file on the computer itself. Call me slightly paranoid. All my passwords are stored in a hidden file on a pocket computer with no internet access. I do not keep this pocket computer on my person generally speaking - I keep it where I reside.
DKB

spt60
Junior Member
Junior Member
Posts: 250
Joined: Thu Feb 08, 2007 8:59 am
Location: OH

#12 Post by spt60 » Tue Jul 15, 2008 2:27 pm

LOL... I kept all my infos. in my head :D
GomJabbar wrote:Yes, I secured my router as soon as I got it. I believe in keeping tight security on any computer device connected to the internet.

I do not store any important financial or ID theft compromising passwords on my computers that have internet access. I do use those computers to access my bank and other accounts, but I do not keep their passwords stored in any software or file on the computer itself. Call me slightly paranoid. All my passwords are stored in a hidden file on a pocket computer with no internet access. I do not keep this pocket computer on my person generally speaking - I keep it where I reside.

GomJabbar
Moderator
Moderator
Posts: 9765
Joined: Tue Jun 07, 2005 6:57 am

#13 Post by GomJabbar » Tue Jul 15, 2008 8:13 pm

spt60 wrote:LOL... I kept all my infos. in my head :D
I just counted 368 lines of user id's, passwords, secret questions/answers, and account numbers in this file. :eek:

I may have a big head, but it doesn't hold much. :P
DKB

Post Reply

Return to “Off-Topic Stuff”

Who is online

Users browsing this forum: ThinkPad560X and 4 guests