Windows 10: FBI recommends to reboot routers to kill VPNFilter malware

Brink · May 26, 2018

FOREIGN CYBER ACTORS TARGET HOME AND OFFICE ROUTERS AND NETWORKED DEVICES WORLDWIDE

SUMMARY
The FBI recommends any owner of small office and home office routers power cycle (reboot) the devices. Foreign cyber actors have compromised hundreds of thousands of home and office routers and other networked devices worldwide. The actors used VPNFilter malware to target small office and home office routers. The malware is able to perform multiple functions, including possible information collection, device exploitation, and blocking network traffic.

TECHNICAL DETAILS
The size and scope of the infrastructure impacted by VPNFilter malware is significant. The malware targets routers produced by several manufacturers and network-attached storage devices by at least one manufacturer. The initial infection vector for this malware is currently unknown.

THREAT
VPNFilter is able to render small office and home office routers inoperable. The malware can potentially also collect information passing through the router. Detection and analysis of the malware’s network activity is complicated by its use of encryption and misattributable networks.

DEFENSE
The FBI recommends any owner of small office and home office routers reboot the devices to temporarily disrupt the malware and aid the potential identification of infected devices. Owners are advised to consider disabling remote management settings on devices and secure with strong passwords and encryption when enabled. Network devices should be upgraded to the latest available versions of firmware.

Authorities and researchers still don’t know for certain how compromised devices are initially infected. They suspect the attackers exploited known vulnerabilities and default passwords that end users had yet to patch or change. That uncertainty is likely driving the advice in the FBI statement that all router and NAS users reboot, rather than only users of the 14 models known to be affected by VPNFilter, which are:

Linksys E1200

Linksys E2500

Linksys WRVS4400N

Mikrotik RouterOS for Cloud Core Routers: Versions 1016, 1036, and 1072

Netgear DGN2200

Netgear R6400

Netgear R7000

Netgear R8000

Netgear WNR1000

Netgear WNR2000

QNAP TS251

QNAP TS439 Pro

Other QNAP NAS devices running QTS software

TP-Link R600VPN

Click to expand...

Read more:

Internet Crime Complaint Center (IC3) | Foreign Cyber Actors Target Home and Office Routers and Networked Devices Worldwide

FBI tells router users to reboot now to kill malware infecting 500k devices | Ars Technica

:)

Masters_Woman · May 29, 2018

FBI warns Russians hacked hundreds of thousands of routers

FBI warns Russians hacked hundreds of thousands of routers

Gino Des · May 29, 2018

wireless conection to router

Hi,

To better assist you, we would like to know the following information:

Are you able to see the router's name in the wireless networks list?

Are you able to connect to the router but unable to connect to the Internet?

Do you receive any error message when connecting to the router? If yes, what is the exact error message that you receive?

In the meantime, we suggest that you run the Network troubleshooter. The Network troubleshooter can help diagnose and fix common connection problems. Kindly follow the steps below:

In the search box on the taskbar, type Network troubleshooter, and then select
Identify and repair network problems from the list of results.

Follow the steps in the troubleshooter and see if that fixes the problem.

If the issue persists, kindly try the troubleshooting steps on the following link:

Fix network connection issues in Windows 10.

We recommend that you try the steps on the Update the network adapter driver,
Run the Network troubleshooter followed by networking commands,
Temporarily turn off firewalls and Use network reset to reinstall network devices sections.

Let us know how it goes for us to assist you further.

Windows 10: FBI recommends to reboot routers to kill VPNFilter malware

FBI recommends to reboot routers to kill VPNFilter malware

FBI recommends to reboot routers to kill VPNFilter malware

FBI recommends to reboot routers to kill VPNFilter malware - Similar Threads - FBI recommends reboot

Recommendations for Wireless Router to run VPN client

Recommendations for Wireless Router to run VPN client

Wireless Router Recommendations

Is the FBI watching me?

Seeking recommendations for non-wireless router

VPNFilter Malware

Dynamic QoS killing first modem/router

recommendation for 802.11ac wireless router

Cold Reboot Resets Router

Users found this page by searching for:

fbi recommends reboot router