FBI Recommends Everbody Reboot their Routers

Kick Back and Relax in the Cheers! Forum. Thoughts on life or want advice or thoughts from other pca members. Or just plain "chill". Originator of da Babe threads.
Post Reply
User avatar
Nuby1Canuby
Posts: 385
Joined: Sat Dec 22, 2012 10:45 am

FBI Recommends Everbody Reboot their Routers

Post by Nuby1Canuby »

"Last Friday, the FBI issued a report recommending that everyone reboot their routers. The reason? "Foreign cyber actors have compromised hundreds of thousands of home and office routers and other networked devices worldwide."

FBI PSA:
https://www.ic3.gov/media/2018/180525.aspx

cnet article:
https://www.cnet.com/how-to/the-fbi-say ... hould-you/
User avatar
Genom
Steely Eyed Missile Man
Posts: 866
Joined: Thu Aug 28, 2014 4:14 pm
Location: Hotlanta

Re: FBI Recommends Everbody Reboot their Routers

Post by Genom »

Yay for pfSense
User avatar
FlyingPenguin
Flightless Bird
Posts: 32773
Joined: Wed Nov 22, 2000 11:13 am
Location: Central Florida
Contact:

Re: FBI Recommends Everbody Reboot their Routers

Post by FlyingPenguin »

Yay for Ubiquiti :)
"Turns out I’m 'woke.' All along, I thought I was just compassionate, kind, and good at history. "

Image
User avatar
wvjohn
Posts: 9238
Joined: Wed Nov 22, 2000 7:09 am
Contact:

Re: FBI Recommends Everbody Reboot their Routers

Post by wvjohn »

Everyone who is a heavy social media user shoul;d immediately boil their router. More bandwidth for the rest of us :)
User avatar
Losbot
Almighty Member
Posts: 4991
Joined: Sun Jul 13, 2014 8:59 am
Location: South Florida

Re: FBI Recommends Everbody Reboot their Routers

Post by Losbot »

Yay for Sonicwall. :)
User avatar
FlyingPenguin
Flightless Bird
Posts: 32773
Joined: Wed Nov 22, 2000 11:13 am
Location: Central Florida
Contact:

Re: FBI Recommends Everbody Reboot their Routers

Post by FlyingPenguin »

This is looking even more serious than everyone thought.

VPNFilter malware infecting 500,000 devices is worse than we thought
https://arstechnica.com/information-tec ... e-thought/

I would recommend that if there's a firmware update for your router, you reboot your router, download it, reboot your router again and take it off the Internet. Then do the update and then reconnect to the Internet. Needless to say, you should also have a non-factory admin password (nice strong one) and make sure that admin access via WAN is disabled.

Those of you with old consumer grade routers (more than 5 years old) should consider a new one, and buy something that's enterprise grade like the ones we mentioned above (Pfsense, Ubiquiti, Sonicwall). These get supported better with security updates. The Ubiquiti EdgeRouter X I'm using is only $55, but no Wifi (most enterprise routers are routers only). You'll need to setup a separate access point, although ANY Wifi router can be configured as just an access point. The Ubiquiti isn't that hard to setup anymore. It has a wizard that walks you through it, and a Gui you can use instead of console commands.
"Turns out I’m 'woke.' All along, I thought I was just compassionate, kind, and good at history. "

Image
User avatar
Err
Life Member
Posts: 5842
Joined: Thu Nov 22, 2007 11:54 am

Re: FBI Recommends Everbody Reboot their Routers

Post by Err »

FP. I have a LinkSys E3000 that works fine. Even though I doubt it's infected as I don't have any remote features enabled, I'm eventually going to need an upgrade as there hasn't been a firmware update since ever. I'm very unfamiliar with enterprise class routers and wireless.

I was looking at Ubiquiti and found your router: https://www.ubnt.com/edgemax/edgerouter-x/

From the description, I'd also need a power adapter that I'm not seeing on their website.

In addition, Is this what I'd want as a wireless access point? https://www.ubnt.com/accessories/aircube/
User avatar
Executioner
Life Member
Posts: 10133
Joined: Wed Nov 22, 2000 11:34 am
Location: Woodland, CA USA

Re: FBI Recommends Everbody Reboot their Routers

Post by Executioner »

I'm on AT&T Uverse. I don't have info on the router. The manual only has this:
The Home Portal ® Intelligent Gateway is an advanced networking device that can be
installed by you or your service provider. This all-in-one device includes the modem,
router, wireless access point, firewall, and backup battery.
User avatar
FlyingPenguin
Flightless Bird
Posts: 32773
Joined: Wed Nov 22, 2000 11:13 am
Location: Central Florida
Contact:

Re: FBI Recommends Everbody Reboot their Routers

Post by FlyingPenguin »

Change the admin password if you can.
"Turns out I’m 'woke.' All along, I thought I was just compassionate, kind, and good at history. "

Image
User avatar
FlyingPenguin
Flightless Bird
Posts: 32773
Joined: Wed Nov 22, 2000 11:13 am
Location: Central Florida
Contact:

Re: FBI Recommends Everbody Reboot their Routers

Post by FlyingPenguin »

This blog has a list of the latest known affected devices (scroll to the end for the list):
https://blog.talosintelligence.com/2018 ... e.html?m=1
"Turns out I’m 'woke.' All along, I thought I was just compassionate, kind, and good at history. "

Image
User avatar
FlyingPenguin
Flightless Bird
Posts: 32773
Joined: Wed Nov 22, 2000 11:13 am
Location: Central Florida
Contact:

Re: FBI Recommends Everbody Reboot their Routers

Post by FlyingPenguin »

ERR: Sorry, missed your post. No, you don't need a power adapter. It comes with one. The router is capable of of POE (power over Ethernet) which may be what you were reading, but it only enables that on a port that it detects a device that requires it.

Not familiar with Ubiquiti's APs except that they usually DON't have a built-in control panel, and require that you run their management software on a PC instead. Not a fan of that (their EdgeRouter X however does have a built in web based control panel).

The enterprise grade access points I ended up using were these:

Comtrend AC1750 :
https://www.amazon.com/gp/product/B01GTO5E60

Happy with them so far.
"Turns out I’m 'woke.' All along, I thought I was just compassionate, kind, and good at history. "

Image
User avatar
Err
Life Member
Posts: 5842
Joined: Thu Nov 22, 2007 11:54 am

Re: FBI Recommends Everbody Reboot their Routers

Post by Err »

Thank you FP
User avatar
Genom
Steely Eyed Missile Man
Posts: 866
Joined: Thu Aug 28, 2014 4:14 pm
Location: Hotlanta

Re: FBI Recommends Everbody Reboot their Routers

Post by Genom »

Executioner wrote:I'm on AT&T Uverse. I don't have info on the router. The manual only has this:
You can put a router between it and the rest of your network.
User avatar
FlyingPenguin
Flightless Bird
Posts: 32773
Joined: Wed Nov 22, 2000 11:13 am
Location: Central Florida
Contact:

Re: FBI Recommends Everbody Reboot their Routers

Post by FlyingPenguin »

You can put the AT&T modem into bridge mode (modem only, disable the built in router), then get your own router as Genom suggests.

Better than stacking a router after a router.

How do I set up Home Networking and Enable Bridge Mode?
https://www.att.com/esupport/article.ht ... /KM1197962
"Turns out I’m 'woke.' All along, I thought I was just compassionate, kind, and good at history. "

Image
User avatar
FlyingPenguin
Flightless Bird
Posts: 32773
Joined: Wed Nov 22, 2000 11:13 am
Location: Central Florida
Contact:

Re: FBI Recommends Everbody Reboot their Routers

Post by FlyingPenguin »

They've added several more router models: https://blog.talosintelligence.com/2018 ... e.html?m=1
Scroll down to "Known Affected Devices" near the bottom. Anything just added to the list is marked (new).
"Turns out I’m 'woke.' All along, I thought I was just compassionate, kind, and good at history. "

Image
Post Reply