More than 300,000 routers in homes and small businesses hacked

A security research outfit has released a report which revealed that more than 300,000 routers in homes and small businesses have been hacked.

Team Cymru, the US-based security outfit which published the report, said that the network of hacked routers is one of the biggest of its kind that has been discovered, with most of the hacked routers in Columbia, India, Italy, Thailand, and Vietnam.

Most of the hacked routers have the following common features: Owners who didn’t know how to configure their routers, insecure default settings (factory-default passwords was not an issue), backdoors in firmware, firmware version vulnerable to a known Cross-Site Request Forgery CSRF) technique, and graphical user interfaces accessible from the Internet.

The hacked router had their DNS settings modified, which is just as bad (maybe worse) than having the end-point computers themselves hacked. This image shows a heatmap distribution of the 300, 000 hacked routers.
Team Cymru 300,000 Hacked Routers

In this particular network of hacked routers, I don’t think it would have made any difference if the computers behind those routers have host-based security tools installed. But it certainly wouldn’t hurt to have the best security tools that you can get installed on your computer(s). The problem with Internet routers is that, for most users, they are an install-it-and-forget-it-device. I think asking users to reset their Internet routers often might not be such a bad idea.

Details about the 300,000 hacked routers are available in this PDF file.

Related Posts

What the future holds for PC-BSD PC-BSD is a multi-purpose distribution of FreeBSD. The last stable release is PC-BSD 9.1. Development and releases tend to be slow and infrequent, and...
All regions and nearly all municipalities in Norway now use open source Public administrations in Norway are increasingly turning to open source, says Martin Bekkelund, business developer at Friprog, the country's open sou...
Tizen 2.0 Alpha code and SDK released The source code and the SDK for Tizen 2.0 alpha has been released. Tizen is a Linux distribution for mobile platforms cobbled together with parts from...
How to install Kali Linux 2.0 without a working Internet connection This short tutorial shows how to install Kali Linux 2.0 on a computer that does not have a working Internet, or network, connection. One of the ta...
LG’s 8-inch G Pad 8.3 Android tablet With the announcement of the G Pad 8.3 Android-powered tablet computer, LG just launched its own version of an 8-inch tablet computers. It probably is...
Amazon’s Prime Air drone delivery sounds great, but it’s DoA So 60 Minutes gave Amazon's Jeff Bezos a platform to tout his company's next great idea - Prime Air, a 30-minute delivery service via small unmanned a...

We Recommend These Vendors and Free Offers

ContainerizeThis 2016 is a free, 2-day conference for all things containers and big data. Featured, will be presentations and free, hands-on workshops. Learn more at ContainerizeThis.com

Launch an SSD VPS in Europe, USA, Asia & Australia on Vultr's KVM-based Cloud platform starting at $5:00/month (15 GB SSD, 768 MB of RAM).

Deploy an SSD Cloud server in 55 seconds on DigitalOcean. Built for developers and starting at $5:00/month (20 GB SSD, 512 MB of RAM).

Want to become an expert ethical hacker and penetration tester? Request your free video training course of Online Penetration Testing and Ethical Hacking

Whether you're new to Linux or are a Linux guru, you can learn a lot more about the Linux kernel by requesting your free ebook of Linux Kernel In A Nutshell.


Leave a Comment

Your email address will not be published. Required fields are marked *

*