FBI Recommends Everbody Reboot their Routers
- Nuby1Canuby
- Posts: 385
- Joined: Sat Dec 22, 2012 10:45 am
FBI Recommends Everbody Reboot their Routers
"Last Friday, the FBI issued a report recommending that everyone reboot their routers. The reason? "Foreign cyber actors have compromised hundreds of thousands of home and office routers and other networked devices worldwide."
FBI PSA:
https://www.ic3.gov/media/2018/180525.aspx
cnet article:
https://www.cnet.com/how-to/the-fbi-say ... hould-you/
FBI PSA:
https://www.ic3.gov/media/2018/180525.aspx
cnet article:
https://www.cnet.com/how-to/the-fbi-say ... hould-you/
Re: FBI Recommends Everbody Reboot their Routers
Yay for pfSense
- FlyingPenguin
- Flightless Bird
- Posts: 32773
- Joined: Wed Nov 22, 2000 11:13 am
- Location: Central Florida
- Contact:
Re: FBI Recommends Everbody Reboot their Routers
Yay for Ubiquiti
"Turns out I’m 'woke.' All along, I thought I was just compassionate, kind, and good at history. "
Re: FBI Recommends Everbody Reboot their Routers
Everyone who is a heavy social media user shoul;d immediately boil their router. More bandwidth for the rest of us
Re: FBI Recommends Everbody Reboot their Routers
Yay for Sonicwall.
- FlyingPenguin
- Flightless Bird
- Posts: 32773
- Joined: Wed Nov 22, 2000 11:13 am
- Location: Central Florida
- Contact:
Re: FBI Recommends Everbody Reboot their Routers
This is looking even more serious than everyone thought.
VPNFilter malware infecting 500,000 devices is worse than we thought
https://arstechnica.com/information-tec ... e-thought/
I would recommend that if there's a firmware update for your router, you reboot your router, download it, reboot your router again and take it off the Internet. Then do the update and then reconnect to the Internet. Needless to say, you should also have a non-factory admin password (nice strong one) and make sure that admin access via WAN is disabled.
Those of you with old consumer grade routers (more than 5 years old) should consider a new one, and buy something that's enterprise grade like the ones we mentioned above (Pfsense, Ubiquiti, Sonicwall). These get supported better with security updates. The Ubiquiti EdgeRouter X I'm using is only $55, but no Wifi (most enterprise routers are routers only). You'll need to setup a separate access point, although ANY Wifi router can be configured as just an access point. The Ubiquiti isn't that hard to setup anymore. It has a wizard that walks you through it, and a Gui you can use instead of console commands.
VPNFilter malware infecting 500,000 devices is worse than we thought
https://arstechnica.com/information-tec ... e-thought/
I would recommend that if there's a firmware update for your router, you reboot your router, download it, reboot your router again and take it off the Internet. Then do the update and then reconnect to the Internet. Needless to say, you should also have a non-factory admin password (nice strong one) and make sure that admin access via WAN is disabled.
Those of you with old consumer grade routers (more than 5 years old) should consider a new one, and buy something that's enterprise grade like the ones we mentioned above (Pfsense, Ubiquiti, Sonicwall). These get supported better with security updates. The Ubiquiti EdgeRouter X I'm using is only $55, but no Wifi (most enterprise routers are routers only). You'll need to setup a separate access point, although ANY Wifi router can be configured as just an access point. The Ubiquiti isn't that hard to setup anymore. It has a wizard that walks you through it, and a Gui you can use instead of console commands.
"Turns out I’m 'woke.' All along, I thought I was just compassionate, kind, and good at history. "
Re: FBI Recommends Everbody Reboot their Routers
FP. I have a LinkSys E3000 that works fine. Even though I doubt it's infected as I don't have any remote features enabled, I'm eventually going to need an upgrade as there hasn't been a firmware update since ever. I'm very unfamiliar with enterprise class routers and wireless.
I was looking at Ubiquiti and found your router: https://www.ubnt.com/edgemax/edgerouter-x/
From the description, I'd also need a power adapter that I'm not seeing on their website.
In addition, Is this what I'd want as a wireless access point? https://www.ubnt.com/accessories/aircube/
I was looking at Ubiquiti and found your router: https://www.ubnt.com/edgemax/edgerouter-x/
From the description, I'd also need a power adapter that I'm not seeing on their website.
In addition, Is this what I'd want as a wireless access point? https://www.ubnt.com/accessories/aircube/
- Executioner
- Life Member
- Posts: 10133
- Joined: Wed Nov 22, 2000 11:34 am
- Location: Woodland, CA USA
Re: FBI Recommends Everbody Reboot their Routers
I'm on AT&T Uverse. I don't have info on the router. The manual only has this:
The Home Portal ® Intelligent Gateway is an advanced networking device that can be
installed by you or your service provider. This all-in-one device includes the modem,
router, wireless access point, firewall, and backup battery.
- FlyingPenguin
- Flightless Bird
- Posts: 32773
- Joined: Wed Nov 22, 2000 11:13 am
- Location: Central Florida
- Contact:
Re: FBI Recommends Everbody Reboot their Routers
Change the admin password if you can.
"Turns out I’m 'woke.' All along, I thought I was just compassionate, kind, and good at history. "
- FlyingPenguin
- Flightless Bird
- Posts: 32773
- Joined: Wed Nov 22, 2000 11:13 am
- Location: Central Florida
- Contact:
Re: FBI Recommends Everbody Reboot their Routers
This blog has a list of the latest known affected devices (scroll to the end for the list):
https://blog.talosintelligence.com/2018 ... e.html?m=1
https://blog.talosintelligence.com/2018 ... e.html?m=1
"Turns out I’m 'woke.' All along, I thought I was just compassionate, kind, and good at history. "
- FlyingPenguin
- Flightless Bird
- Posts: 32773
- Joined: Wed Nov 22, 2000 11:13 am
- Location: Central Florida
- Contact:
Re: FBI Recommends Everbody Reboot their Routers
ERR: Sorry, missed your post. No, you don't need a power adapter. It comes with one. The router is capable of of POE (power over Ethernet) which may be what you were reading, but it only enables that on a port that it detects a device that requires it.
Not familiar with Ubiquiti's APs except that they usually DON't have a built-in control panel, and require that you run their management software on a PC instead. Not a fan of that (their EdgeRouter X however does have a built in web based control panel).
The enterprise grade access points I ended up using were these:
Comtrend AC1750 :
https://www.amazon.com/gp/product/B01GTO5E60
Happy with them so far.
Not familiar with Ubiquiti's APs except that they usually DON't have a built-in control panel, and require that you run their management software on a PC instead. Not a fan of that (their EdgeRouter X however does have a built in web based control panel).
The enterprise grade access points I ended up using were these:
Comtrend AC1750 :
https://www.amazon.com/gp/product/B01GTO5E60
Happy with them so far.
"Turns out I’m 'woke.' All along, I thought I was just compassionate, kind, and good at history. "
Re: FBI Recommends Everbody Reboot their Routers
Thank you FP
Re: FBI Recommends Everbody Reboot their Routers
You can put a router between it and the rest of your network.Executioner wrote:I'm on AT&T Uverse. I don't have info on the router. The manual only has this:
- FlyingPenguin
- Flightless Bird
- Posts: 32773
- Joined: Wed Nov 22, 2000 11:13 am
- Location: Central Florida
- Contact:
Re: FBI Recommends Everbody Reboot their Routers
You can put the AT&T modem into bridge mode (modem only, disable the built in router), then get your own router as Genom suggests.
Better than stacking a router after a router.
How do I set up Home Networking and Enable Bridge Mode?
https://www.att.com/esupport/article.ht ... /KM1197962
Better than stacking a router after a router.
How do I set up Home Networking and Enable Bridge Mode?
https://www.att.com/esupport/article.ht ... /KM1197962
"Turns out I’m 'woke.' All along, I thought I was just compassionate, kind, and good at history. "
- FlyingPenguin
- Flightless Bird
- Posts: 32773
- Joined: Wed Nov 22, 2000 11:13 am
- Location: Central Florida
- Contact:
Re: FBI Recommends Everbody Reboot their Routers
They've added several more router models: https://blog.talosintelligence.com/2018 ... e.html?m=1
Scroll down to "Known Affected Devices" near the bottom. Anything just added to the list is marked (new).
Scroll down to "Known Affected Devices" near the bottom. Anything just added to the list is marked (new).
"Turns out I’m 'woke.' All along, I thought I was just compassionate, kind, and good at history. "