• We've upgraded our forums. Please post any issues/requests in this thread.

Computer routers face hijack risk:

Joined
Oct 1, 2005
Messages
796 (0.18/day)
Likes
37
System Name Current
Processor Core i5 2500k
Motherboard Z77MA-G45
Cooling Cooler Master Tx3
Memory 8gb DDR3 1600Mhz
Video Card(s) Evga GTX 960 4GB GDDR5
Storage (1) SAMSUNG 850 EVO 500GB
Display(s) ASUS PB278Q 27" WQHD 2560x1440 IPS
Case Fractal Core 1000
Audio Device(s) Onboard
Power Supply 430 Watt Corsair
Mouse Logitech g602
Keyboard K70 LUX Mech LB, Red LED, Cherry MX Brown
Software Windows 10 + Hackintosh
#1
Researchers at both Symantec Corp. and the University of Indiana say routers are at risk of highjacking. The research found that router users are succeptable to hijacking of their hardware through malicious code hiding in specially crafted websites that could change settings on the network devices and begin phishing attacks. These attacks are very dangerous to users an example givin by cbc.ca states, "For example, a person could enter the correct address of their bank's website into their web browser but they would be taken to a fake site designed to steal their banking information." The scary thing is that this particular type of attack works on The on all major consumer routers, including routers made by Linksys, Belkin, Netgear and D-Link, but only after a user on that device visited a specially crafted web page for it to work.

Show full news post
 

WarEagleAU

Bird of Prey
Joined
Jul 9, 2006
Messages
10,809 (2.59/day)
Likes
529
Location
Gurley, AL
System Name Boddha Getta Boddha Getta Bah!
Processor AMD FX 6100 @ 4.432Ghz @1.382
Motherboard ASUS M5A99X EVO AMD 990X AMD SB950
Cooling Custom Water. EK 240MM Kit, Supreme HSF - Runs 35C
Memory 2 x 4GB Corsair Vengeance White LP @ 1.35V
Video Card(s) XFX Radeon HD 6870 980/1100
Storage WD Caviar Black 1.0TB, WD Caviar Green 1.0TB, WD 160GB
Display(s) Asus VH222/S 22: (21.5" Viewable) 1920x1080p HDMI LCD Monitor
Case NZXT White Switch 810
Audio Device(s) Onboard Realtek 5.1
Power Supply NZXT Hale 90 Gold Cert 750W Modular PSU
Software Windows 8.1 Profession 64 Bit
#2
::cringe:: this isnt good news....
 

XooM

New Member
Joined
Oct 17, 2004
Messages
468 (0.10/day)
Likes
7
Location
Close to FrozenCPU.com
Processor Athlon 64 3800 x2 Windosr @ 2.65 (and rising)
Motherboard BIOSTAR TForce 550
Cooling Custom Liquid (WMD20RLZT, Swiftech STORM, 2-302 w/ custom shroud, 2x sanyo denki)
Memory Patriot PDC22G5300LLK
Video Card(s) Sapphire x1900GT
Storage 1x maxtor 40gb, 2x hitachi T7K250 160gb drives RAID 0, 1x 160gb Spinpoint
Display(s) 2x 17" CRT (dells; one from 1998, one from 2001) at 1600x1200 each
Case Aspire X-SuperAlien
Audio Device(s) integrated
Power Supply Seasonic S12 600watt
Software WinXP SP2, Folding@Home, Battlefield2, etc
#3
thank God, the FSM, and Tom Cruise for Smoothwall :cool:
 
Joined
Dec 5, 2006
Messages
7,698 (1.91/day)
Likes
747
Processor i7-5820K
Motherboard Gigabyte X99-UD4
Cooling Corsair H100i
Memory 16GB Crucial DDR4-2400
Video Card(s) Asus Strix GTX 1070
Storage 240GB HyperX 3k, 500GB Samsung 850EVO, 2x WD Black 640gb, WD Black 1TB, Seagate 10TB
Display(s) 2x BenQ 24" 1920x1080
Case BitFenix Ghost
Audio Device(s) Focusrite Saffire PRO 14 -> DBX DriveRack PA+ -> Mackie MR8 and MR10 / Corsair Vengeance 2100
Power Supply Corsair RM1000i
Mouse Logitech G500s
Keyboard Logitech G110
Software Windows 10 x64 Pro
#4
Cisco 850 FTW! < Maybe I should get one, they do the trick, and are the cheapest of the group.

I have been highly considering setting up another linux machine to act as a router anyways.
 
Joined
Aug 4, 2006
Messages
685 (0.17/day)
Likes
1
Processor Intel i7 4790K
Motherboard Asus Maximus VII Impact
Cooling 2x120mm fans, 1x140mm fan, 1x240mm radiator, 1x140mm radiator, XSPC Water Cooling Pump
Memory 16gb Corsair Dominator Series 2400mhz
Video Card(s) XFX R9 295x2
Storage 1x500gb Crucial SSD
Case Corsair 250D
Power Supply Seasonic 1200w Platinum
#5
wouldn't the url be different then. I'd notice something was wrong then
 

Namslas90

New Member
Joined
Aug 27, 2006
Messages
4,846 (1.17/day)
Likes
535
Location
Earth
Processor AMD PII 940
Motherboard Biostar TA790GXB3
Cooling Custom Air
Memory 4GB G.SKILL (2x2)
Video Card(s) ASUS Radeon HD 5970
Storage 2X32GB ST SSd R0 + WD500GB storage
Display(s) Asus 22" Widescreen
Case Thermaltake V9 BE
Power Supply PCP&C 750 Silencer
#6
Just another reason why I don't/won't use routers. Multiple ISP's is the way to go!!
 

XooM

New Member
Joined
Oct 17, 2004
Messages
468 (0.10/day)
Likes
7
Location
Close to FrozenCPU.com
Processor Athlon 64 3800 x2 Windosr @ 2.65 (and rising)
Motherboard BIOSTAR TForce 550
Cooling Custom Liquid (WMD20RLZT, Swiftech STORM, 2-302 w/ custom shroud, 2x sanyo denki)
Memory Patriot PDC22G5300LLK
Video Card(s) Sapphire x1900GT
Storage 1x maxtor 40gb, 2x hitachi T7K250 160gb drives RAID 0, 1x 160gb Spinpoint
Display(s) 2x 17" CRT (dells; one from 1998, one from 2001) at 1600x1200 each
Case Aspire X-SuperAlien
Audio Device(s) integrated
Power Supply Seasonic S12 600watt
Software WinXP SP2, Folding@Home, Battlefield2, etc
#7
wouldn't the url be different then. I'd notice something was wrong then
no. It could spoof your DNS and redirect any normal URL to any page they wanted, all while looking completely legit.
 
Joined
Jul 18, 2005
Messages
937 (0.21/day)
Likes
13
Location
Israel
Processor Athlon 64 x2 4000+ (65nm Brisbane)
Motherboard Abit AN-M2 (AM2) nForce 630a
Cooling Stock everything (for the time being), 2x120mm fans (intake & exhaust)
Memory 2GB (2x1024) OCZ Platinum PC2-6400 (4-4-4-15, 2T)
Video Card(s) PowerColor ATI HD 2600XT 256mb GDDR4 PCI-e
Storage Hitachi Deskstar 160GB SATA 3.0G/s, External USB2.0 WD 160GB
Display(s) LG 17' LCD (L1753TR)
Case HEC-Compucase 6A, black & grey
Audio Device(s) On-Board 7.1 (realtek)
Power Supply Spire Zeno 650W
Software WinXP Pro SP2 (32-bit, for the time being)
#8
this definantly isnt good...

there are way to protect one's PC against these types of things, but how does one protect ones router?
 

Pinchy

New Member
Joined
Apr 29, 2006
Messages
5,105 (1.20/day)
Likes
270
Location
Sydney, Australia
System Name UltraPC
Processor E8500 Core 2 Duo, 1333Mhz FSB, 3.16Ghz @ 4.5GHz (got into Windows @ 4.75GHz)
Motherboard ASUS P5Q-e
Cooling CPU Cooler - TT V14 Pro, 2x120mm CM Blue LED fans, 1x90mm CM Blue LED fan
Memory G.Skill Pi 4GB (2x2GB) Dual Channel DDR2 PC8000 (1000MHz), 5-5-5-15
Video Card(s) Sapphire HD4850 512mb with ASUS EAH4850 BIOS
Storage 2x 500GB Seagate 7200.12 Raid 0
Display(s) Acer AL1912, 19" LCD screen
Case Thermaltake Soprano Black ATX case
Audio Device(s) Onboard 7.1, Speakers - 5 + Sub + Monitor speakers
Power Supply Thermaltake 850W Toughpower Cable Management - Quad (2x18A and 2x30A) 12V rails
Software Win 7 Pro x64, MSN, CS:Source, etc etc
#10
hmm, i hope SMC isnt affected :p
 
Joined
Feb 13, 2005
Messages
362 (0.08/day)
Likes
18
Location
Saskatoon, SK
Processor FX-8150
Motherboard Gigabyte 990FXA-UD3
Cooling Thermalright Ultra-120 Extreme lapped & shimmed
Memory Patriot Viper Extreme 8GB DDR3-1866 9-11-9-27 1.65V
Video Card(s) MSI 6950 2GB Twin Frozr II @ 6970 875/1375
Storage Crucial M4 0309 64GB
Display(s) Dell U2410
Case Corsair 650D
Audio Device(s) onboard
Power Supply Corsair AX750
Software Windows [8] Developer Preview
#11
read the rest of the story at the end of the link:

The researchers cited surveys that showed half of home router users use the default password or no password on the device, and 95 per cent allow their web browsers to use JavaScript code.

"This means 47.5 per cent of all home users … are effectively leaving themselves open to another attack — allowing attackers to circumvent all known anti-phishing countermeasures," the researchers wrote.
These are the same kind of people that don't secure their wireless networks
 
Joined
May 15, 2006
Messages
4,677 (1.10/day)
Likes
86
Location
Someone who's going to find NewTekie1 and teach hi
Processor DualCore AMD Athlon 64x2 4800+ (o/c 2801mhz STABLE (Ketxxx, POGE, Tatty One, ME))
Motherboard ASUS A8N-SLI Premium (PCIe x16, x4, x1)
Cooling PhaseChange Coolermaster CM754/939 (fan/heatsink), Thermalright heatspreaders + fan built on (RAM)
Memory 512mb PC-3200 DDR400 (set DDR-33 for o/c) by Corsair (matched pair, 2x256mb) 200.1/200mhz
Video Card(s) BFG GeForce 7900 GTX OC 512mb GDDR3 ram (o/c manually to 686 core/865 memory) - PhaseChange cooled
Storage Dual "Raptor X" 16mb 10krpm/RAID 0 Promise EX8350 x4 PCIe 128mb & Intel IO chip/CENATEK RocketDrive
Display(s) SONY 19" Trinitron MultiScan 400ps 1600x1200 75hz refresh 32-bit color
Case Antec Super-LanBoy (aluminum baby-tower w/ lower front & upper rear cooling exhaust fans)
Audio Device(s) RealTek AC97 onboard mobo stereo sound (Altec Lansing ACS-45 speakers - 10 yrs. still running!)
Power Supply Antec 500w ATX 2.0 "SmartPower" powersupply
Software Windows Server 2003 SP #1 fully patched, & massively tuned/tweaked to-the-max (plus latest drivers)
#13
Researchers at both Symantec Corp. and the University of Indiana say routers are at risk of highjacking. The research found that router users are succeptable to hijacking of their hardware through malicious code hiding in specially crafted websites that could change settings on the network devices and begin phishing attacks. These attacks are very dangerous to users an example givin by cbc.ca states, "For example, a person could enter the correct address of their bank's website into their web browser but they would be taken to a fake site designed to steal their banking information." The scary thing is that this particular type of attack works on The on all major consumer routers, including routers made by Linksys, Belkin, Netgear and D-Link, but only after a user on that device visited a specially crafted web page for it to work.

Source: cbc.ca
Turn off JAVASCRIPT in your browsers & web based apps that use it...

:)

* This is the reason WHY I do so, OR rather, a part of it... & only use it, where you HAVE to. For INTRANET usage, it's decent stuff... but, for the public internet, it definitely has DOWNSIDES!

APK

P.S.=> Webmasters may not LIKE me doing that, but it is a personal choice - I'd like to keep my system solid & secure as is possible! apk
 
Last edited:
Joined
Feb 13, 2005
Messages
362 (0.08/day)
Likes
18
Location
Saskatoon, SK
Processor FX-8150
Motherboard Gigabyte 990FXA-UD3
Cooling Thermalright Ultra-120 Extreme lapped & shimmed
Memory Patriot Viper Extreme 8GB DDR3-1866 9-11-9-27 1.65V
Video Card(s) MSI 6950 2GB Twin Frozr II @ 6970 875/1375
Storage Crucial M4 0309 64GB
Display(s) Dell U2410
Case Corsair 650D
Audio Device(s) onboard
Power Supply Corsair AX750
Software Windows [8] Developer Preview
#14
Well I was more concerned with those who leave the default password on their router but hey I've never liked javascript either.
 

Scavar

New Member
Joined
Aug 29, 2006
Messages
573 (0.14/day)
Likes
0
Location
Ft Lauderdale, FL
System Name ScarredWolf(Desktop), MBlackWolf(Laptop)
Processor E6600(Desktop), T7300(Laptop)
Motherboard EVGA 680i(Desktop), IFL90(Laptop)
Cooling Akasa EVO 120(Desktop), No idea(Laptop)
Memory G Skill PI 8GB 4x2gb(Desktop), G Skill 3GB 1GB/2GB(Laptop)
Video Card(s) 8800GTS 640mb(Desktop), 8600m GT(Laptop)
Storage 3x250GB 1x500GB(Desktop), 1x320GB(Laptop)
Display(s) Acer AL2216W 22"(Desktop), 15.4"(Laptop)
Case Cosmos 1000(Desktop), PowerPro J 10:15(Laptop)
Audio Device(s) CreativeX-Fi/Z-5500(Desktop), Realtek/No idea(Laptop)
Power Supply PC Power and Cooling Silencer 610w(Desptop), *shrug*(Laptop)
Software Windows Vista Ultimatex64 with tweaks(Both)
Benchmark Scores I'm too lazy to benchmark anything.
#15
After reading this, I decided I would finally turn Javascript off.

My dad is pretty insane when it comes to routers. Who the hell uses the default password? Isn't it like admin for all of them? I mean come on....
 

Pinchy

New Member
Joined
Apr 29, 2006
Messages
5,105 (1.20/day)
Likes
270
Location
Sydney, Australia
System Name UltraPC
Processor E8500 Core 2 Duo, 1333Mhz FSB, 3.16Ghz @ 4.5GHz (got into Windows @ 4.75GHz)
Motherboard ASUS P5Q-e
Cooling CPU Cooler - TT V14 Pro, 2x120mm CM Blue LED fans, 1x90mm CM Blue LED fan
Memory G.Skill Pi 4GB (2x2GB) Dual Channel DDR2 PC8000 (1000MHz), 5-5-5-15
Video Card(s) Sapphire HD4850 512mb with ASUS EAH4850 BIOS
Storage 2x 500GB Seagate 7200.12 Raid 0
Display(s) Acer AL1912, 19" LCD screen
Case Thermaltake Soprano Black ATX case
Audio Device(s) Onboard 7.1, Speakers - 5 + Sub + Monitor speakers
Power Supply Thermaltake 850W Toughpower Cable Management - Quad (2x18A and 2x30A) 12V rails
Software Win 7 Pro x64, MSN, CS:Source, etc etc
#16
read the rest of the story at the end of the link:



These are the same kind of people that don't secure their wireless networks
lol who doesnt use a password :p
 

ex_reven

New Member
Joined
Sep 4, 2006
Messages
5,217 (1.27/day)
Likes
159
#17
My router password is set to default :p
i could never really be bothered to change it :roll:

i would of course do so if i was visiting less than ideal websites, but i havnt ventured away from hotmail, tpu, myspace and wikipedia on this computer in the few months ive had it.

il change it later ;)
 

Pinchy

New Member
Joined
Apr 29, 2006
Messages
5,105 (1.20/day)
Likes
270
Location
Sydney, Australia
System Name UltraPC
Processor E8500 Core 2 Duo, 1333Mhz FSB, 3.16Ghz @ 4.5GHz (got into Windows @ 4.75GHz)
Motherboard ASUS P5Q-e
Cooling CPU Cooler - TT V14 Pro, 2x120mm CM Blue LED fans, 1x90mm CM Blue LED fan
Memory G.Skill Pi 4GB (2x2GB) Dual Channel DDR2 PC8000 (1000MHz), 5-5-5-15
Video Card(s) Sapphire HD4850 512mb with ASUS EAH4850 BIOS
Storage 2x 500GB Seagate 7200.12 Raid 0
Display(s) Acer AL1912, 19" LCD screen
Case Thermaltake Soprano Black ATX case
Audio Device(s) Onboard 7.1, Speakers - 5 + Sub + Monitor speakers
Power Supply Thermaltake 850W Toughpower Cable Management - Quad (2x18A and 2x30A) 12V rails
Software Win 7 Pro x64, MSN, CS:Source, etc etc
#18
you log onto your internet banking :p!

dont mind me if i sit out the front of your house with my bro's laptop :D
 

Pinchy

New Member
Joined
Apr 29, 2006
Messages
5,105 (1.20/day)
Likes
270
Location
Sydney, Australia
System Name UltraPC
Processor E8500 Core 2 Duo, 1333Mhz FSB, 3.16Ghz @ 4.5GHz (got into Windows @ 4.75GHz)
Motherboard ASUS P5Q-e
Cooling CPU Cooler - TT V14 Pro, 2x120mm CM Blue LED fans, 1x90mm CM Blue LED fan
Memory G.Skill Pi 4GB (2x2GB) Dual Channel DDR2 PC8000 (1000MHz), 5-5-5-15
Video Card(s) Sapphire HD4850 512mb with ASUS EAH4850 BIOS
Storage 2x 500GB Seagate 7200.12 Raid 0
Display(s) Acer AL1912, 19" LCD screen
Case Thermaltake Soprano Black ATX case
Audio Device(s) Onboard 7.1, Speakers - 5 + Sub + Monitor speakers
Power Supply Thermaltake 850W Toughpower Cable Management - Quad (2x18A and 2x30A) 12V rails
Software Win 7 Pro x64, MSN, CS:Source, etc etc
#20
make a bet :D?

I already know your router password :p
 

Pinchy

New Member
Joined
Apr 29, 2006
Messages
5,105 (1.20/day)
Likes
270
Location
Sydney, Australia
System Name UltraPC
Processor E8500 Core 2 Duo, 1333Mhz FSB, 3.16Ghz @ 4.5GHz (got into Windows @ 4.75GHz)
Motherboard ASUS P5Q-e
Cooling CPU Cooler - TT V14 Pro, 2x120mm CM Blue LED fans, 1x90mm CM Blue LED fan
Memory G.Skill Pi 4GB (2x2GB) Dual Channel DDR2 PC8000 (1000MHz), 5-5-5-15
Video Card(s) Sapphire HD4850 512mb with ASUS EAH4850 BIOS
Storage 2x 500GB Seagate 7200.12 Raid 0
Display(s) Acer AL1912, 19" LCD screen
Case Thermaltake Soprano Black ATX case
Audio Device(s) Onboard 7.1, Speakers - 5 + Sub + Monitor speakers
Power Supply Thermaltake 850W Toughpower Cable Management - Quad (2x18A and 2x30A) 12V rails
Software Win 7 Pro x64, MSN, CS:Source, etc etc
#22
Moral of the story, change ur password
 

Pinchy

New Member
Joined
Apr 29, 2006
Messages
5,105 (1.20/day)
Likes
270
Location
Sydney, Australia
System Name UltraPC
Processor E8500 Core 2 Duo, 1333Mhz FSB, 3.16Ghz @ 4.5GHz (got into Windows @ 4.75GHz)
Motherboard ASUS P5Q-e
Cooling CPU Cooler - TT V14 Pro, 2x120mm CM Blue LED fans, 1x90mm CM Blue LED fan
Memory G.Skill Pi 4GB (2x2GB) Dual Channel DDR2 PC8000 (1000MHz), 5-5-5-15
Video Card(s) Sapphire HD4850 512mb with ASUS EAH4850 BIOS
Storage 2x 500GB Seagate 7200.12 Raid 0
Display(s) Acer AL1912, 19" LCD screen
Case Thermaltake Soprano Black ATX case
Audio Device(s) Onboard 7.1, Speakers - 5 + Sub + Monitor speakers
Power Supply Thermaltake 850W Toughpower Cable Management - Quad (2x18A and 2x30A) 12V rails
Software Win 7 Pro x64, MSN, CS:Source, etc etc
#24
no, now i cant wipe your bank account :p
 
Joined
May 13, 2006
Messages
654 (0.15/day)
Likes
18
Location
Newcastle upon Tyne
Processor Intel Core I7 4770K
Motherboard MSI Z87-GD65
Cooling Arctic Cooling Freezer i30
Memory 32GB DDR3 (16GB Corsair XMS3 / 16GB Crucial Ballistix Tactical)
Video Card(s) AMD 280X
Storage Samsung 840 / Crucial BX100
Display(s) BenQ XL2430T / BenQ EW2430
Case CoolerMaster Stacker 831
Audio Device(s) Sound Blaster Recon3D
Power Supply Corsair 750W HX Modular
Mouse Razer DeathAdder Chroma
Keyboard Razer BlackWidow Ultimate
Software Windows 10 Professional
#25
Just use firefox with the NoScript extension... then you can enable javascript for the sites you need and leave it off for everything else... works a treat :)