[RED ALERT] Factory reset your home WiFi routers now!!!

[Sybaris Caesar]

There was a Russian (alleged state sponsored) router malware discovered last week. A malware so dangerous and I'm direct quoting TomsHardware here:

"... The malware itself has a previously unnoticed capability: It can stage a man-in-the-middle attack on your web traffic, altering what you see online and possibly hiding other nefarious deeds.

"They can manipulate everything going through the compromised device," a Cisco Talos researcher told Ars Technica. "They can modify your bank-account balance so that it looks normal while at the same time they're siphoning off money."

Affected Routers and Support Pages

Here's the list of affected devices (There's more models from more brands but I don't think they're relevant for BD. But still you can check the OG SOURCE below) :

Asus RT-AC66U
Asus RT-N10
Asus RT-N10E
Asus RT-N10U
Asus RT-N56U
Asus RT-N66U

Asus support page

D-Link DES-1210-08P
D-Link DIR-300
D-Link DIR-300A
D-Link DSR-250N
D-Link DSR-500N
D-Link DSR-1000
D-Link DSR-1000N

D-Link support page specifically for VPNFilter

Linksys E1200
Linksys E2500
Linksys E3000
Linksys E3200
Linksys E4200
Linksys RV082
Linksys WRVS4400N

Linksys support page

MikroTik CCR1009
MikroTik CCR1016
MikroTik CCR1036
MikroTik CCR1072
MikroTik CRS109
MikroTik CRS112
MikroTik CRS125
MikroTik RB411
MikroTik RB450
MikroTik RB750
MikroTik RB911
MikroTik RB921
MikroTik RB941
MikroTik RB951
MikroTik RB952
MikroTik RB960
MikroTik RB962
MikroTik RB1100
MikroTik RB1200
MikroTik RB2011
MikroTik RB3011
MikroTik RB Groove
MikroTik RB Omnitik
MikroTik STX5

MicroTik support page

Netgear DG834
Netgear DGN1000
Netgear DGN2200
Netgear DGN3500
Netgear FVS318N
Netgear MBRN3000
Netgear R6400
Netgear R7000
Netgear R8000
Netgear WNR1000
Netgear WNR2000
Netgear WNR2200
Netgear WNR4000
Netgear WNDR3700
Netgear WNDR4000
Netgear WNDR4300
Netgear WNDR4300-TN
Netgear UTM50

Netgear support page

QNAP TS251
QNAP TS439 Pro
Other QNAP NAS devices running QTS software

QNAP firmware download page

TP-Link R600VPN
TP-Link TL-WR741ND
TP-Link TL-WR841N

TP-Link support page

OG SOURCE

[Sami 1999]

¤¤¤¤. Once I do a factory resetm how to setup everything again?

[Sybaris Caesar]

write down every setting before resetting.

[minitt]

and thats why i never access my bank from any pc.

[Ahnaf_i7X]

Even after factory reset, how could I be sure that this malware isn't lingering around somewhere? Any toolkit available?

[Sybaris Caesar]

Even after factory reset, how could I be sure that this malware isn't lingering around somewhere? Any toolkit available?

Factory reset to flush out the malware if it's already infected and then update firmware (if it's available) to a newer firmware that has countermeasures against the malware.

[Sami 1999]

write down every setting before resetting.

You mean settings from that I can access from tplink.wifi net?

[Sybaris Caesar]

You mean settings from that I can access from tplink.wifi net?

settings you changed after buying the router. Most importantly your ISP settings.

[Sami 1999]

settings you changed after buying the router. Most importantly your ISP settings.

I have no idea how to do that. Guess I'm screwed.

[Sybaris Caesar]

I have no idea how to do that. Guess I'm screwed.

At least tomar ISP settings tuke rakho. PPPoE hole username ar password or direct hole IP, Gateway, Subnet Mask etc. Problem nai. ISP ke jigges korlei tara bold dibe.

[Badhon_raj]

I'm on ddwrt. So I guess I'm safe?

[Sybaris Caesar]

I'm on ddwrt. So I guess I'm safe?

Maybe. But still update to latest one available for your device. https://www.reddit.com/r/techsupport...to_vpn_filter/