The concept of malware is nothing new, but as technology continues to sophisticate, the methods that hackers are using to target, infiltrate and compromise our most secure networks are rapidly changing. Case in point: High-tech malware is now being used to allow access into wireless routers, including those used to power personal home and office communication systems around the world.
On May 25, the FBI issued a statement urging all consumers to reset their routers in response to reports that a new malware attack, supposedly originating in Russia, could put them at risk. Specifically, it could block incoming web traffic from the routers, collect the information transported through them, and even disarm the device entirely. At present time, the specific malware, named VPN-Filter, has affected more than half a million routers, reaching a global span of at least 54 countries. As technical experts seek to find answers and determine a way to prevent or stop the attacks in their paths, one course of action has become clear: Router security must transition from an important initiative to a critical one.
Why Router Security Matters
Especially if you only use your wireless router for at-home, personal web surfing, you might believe its security isn’t all that paramount. After all, what kind of top-secret data could it really be storing?
Turns out, more than you think. All of the information that you access or transmit over the internet flows directly into it. That means any banking information you log in to access, any emails or direct messages you send or receive, any personal profile or contact data you set up, it’s all there. If there’s a breach, it all becomes vulnerable.
Steps to Make Your Router as Secure as Possible
While the FBI’s suggestion to reset your router is a good first step, it shouldn’t be your only one. Still, it’s a solid place to start. Yet, don’t just unplug it and immediately plug it back in again. Rather, wait about 20 seconds in between cycles to give the machine time to cool down and properly reset.
Next, you’ll need to reset the administrative password associated with your wireless router account. This is the password that users are required to enter when they want to join your wireless network either at home or in the office. Typically, the manufacturer-administered password is an incredibly long combination of letters, numbers, and symbols. As a result, most people opt to shorten them to words or phrases that are easier to remember. The only problem? By doing so, you’re not just making it easier for yourself to remember the password. You’re also making it easier for a hacker to guess. This time around, choose a strong password that will be difficult to crack. One suggestion is to make a mnemonic password, where each letter stands for a word in a sentence, so together the letters don’t make sense, but read as an acronym, they do. For instance, you might use 2018WBMBYE! which means 2018 will be my best year ever!
Then, go into your router’s settings. There, you’ll find the option to enable or disable remote access. If yours is currently set to enable make sure you switch it to disable or uncheck the box.
Finally, it’s time to update your firmware. While you might get a pop-up notification every two seconds on your smart device or laptop informing you of a new update, your router isn’t quite as sophisticated and can’t always communicate that information and timeline to you. To that end, remember to check every three to four months to see if your wireless router needs updating. This information can typically be found on the manufacturer’s website.
As the FBI and other entities continue to investigate the malware attacks, the above steps can help homeowners and business professionals maintain their router security. If these processes are too time-consuming or complex, users can also choose to replace their existing, legacy routers with more modern ones that accommodate automatic updates. Newer models come equipped with this capability, whereas many older models are not. If yours is up-to-date, it is inherently less vulnerable to malware attack.
Moving Forward: Staying Safe and Protecting Your Router Data
If you don’t want to purchase a new unit, but you still want to be certain your system is clean and not compromised, you can also perform a total factory reset. This will revert your router back to the way it was when you first purchased it from the manufacturer. While this does remove the malware and its associated settings, keep in mind that it will also erase your personal saved settings, including any passwords or network configurations. Then, moving forward be sure to practice heightened security measures when dealing with your clean router. It might be one of the smallest pieces of technology you own or operate, but it’s one of the most important and should be treated as such.
