How to Handle Intruded Routers

Do you think your router may have been hacked? Here's the good news: in most cases, you can easily fix it. The following is how to repair an intruded router and remove router malware through six quick steps.

1. Disconnect the router from the internet and other devices

Immediately isolate the router! Unplug the network cable and disconnect any other cables between the router and other devices. But don't let your router be plugged in, as it requires power to secure it.

2. Perform factory reset

If your router is disconnected, set it to the factory settings. This goes beyond the off/on switch you make when disconnected from the network. Factory reset will delete all your configurations and restore your router settings to a new state. Some types of router malware, such as VPNFilter, can also be removed after factory reset.

For specific instructions on how to reset the router, please refer to the user manual. Many routers have a small embedded reset button that you need to press with a paper clip.

3. Log in and change your administrator password

After factory reset, you can log in to the router using default management credentials. You can find these in the router itself or in your user manual. After logging in, please immediately change the admin password to a long, unique, and complex password. In this way, your router hacker will not be able to re-enter if they try your old password.

4. Create a new SSID and password for your Wi Fi network

SSID (Service Set Identifier) is the name of your Wi Fi network. Your router may include its brand name in the default SSID, which is a great help for potential router hackers. Knowing your router type may make it easier for others to crack it.

Set a new SSID and make it long and complex. The WPA encryption used by routers to protect passwords includes SSID in the encryption algorithm. Due to this encryption approach, shorter or more common network names can be more easily cracked through rainbow tables or other assistance.

Apply these rules to your password as well - long, complex, and unique are always the best. The password length should be at least 15-20 characters. The longer the password, the better.

5. Create a guest network (if needed)

A guest network is an independent network on a router that allows devices that do not want to connect to the main network to access the internet. When you have guests visiting, they are very useful because you never know whose phone is infected with malware.

Isolate unfamiliar devices on the customer's network to prevent them from directly communicating with your own devices (and potentially infecting them).

Visitor networks are also an ideal choice for less secure smart devices, which often have weaker protection than computers and phones. You can find the customer network options in the router settings.

6. Update the firmware on the router

If your router cannot automatically update firmware - many routers don't - you'll have to do it yourself. Go to the router manufacturer's website and search for their 'Download' section. Here, you should find a series of router firmware.

Download and install the latest firmware for your router to fix firmware vulnerabilities and prevent hackers from exploiting them.

You can also find the firmware settings for the router by logging into the management menu, but you may receive inaccurate guidance. Some routers will tell you that their firmware has been updated, but in reality, the firmware is too old.

If you can't upgrade your firmware to a more secure version, then switch to a new router - preferably another manufacturer that won't expose you to hackers.

Article source: https://article-realm.com/article/Health-Fitness/43154-How-to-Handle-Intruded-Routers.html