Published: Tue, May 29, 2018
Money | By Bruce West

Federal Bureau of Investigation urging people to restart routers after thousands infected by 'foreign actors'

Federal Bureau of Investigation urging people to restart routers after thousands infected by 'foreign actors'

That's because a malware system linked to Russian Federation has infected hundreds of thousands of internet routers. Hackers are using the devices as a way to get into networks and see data.

According to reports by Cisco's Talos Intelligence, at least 500,000 routers in 54 countries were targeted by the malware, which is called VPNFilter. QNAP storage devices are also known to be affected.

Cisco released the report on Wednesday after observing a spike this month in infections in the Ukraine, which accused Russian Federation of planning an attack to coincide with Saturday's Champions Cup final in Kiev.

You can simply un-plug your router to turn it off.

The FBI is asking owners of small office and home office routers to reboot their devices after hackers compromised "hundreds of thousands" of routers and networked devices worldwide.

On Thursday, the Federal Bureau of Investigation revealed it had seized a domain associated with the campaign, giving it the chance to drop malware traffic into a sinkhole. The FBI said rebooting routers will disrupt the malware and help the bureau identify which networking devices were affected.

The FBI said it would gather the IP addresses of infected devices, and pass those to the Shadowserver Foundation to disseminate among ISPs and non-US CERTs. Experts say once you've turned the router back on, you will need to create a new, stronger password for your router. "There is no indication at present that the exploit of zero-day vulnerabilities is involved in spreading the threat", wrote Symantec researchers.

Like this: