Last week, Cisco reported on a malware called VPNFilter that is believed to have infected around 500,000 routers to create a massive botnet. The malware, believed to have originated in Russia, bears several similarities to the BlackEnergy malware.
The routers that were affected, as well as other internet-connected devices, include brands such as Linksys, MikroTik, Netgear, and TP-Link.
The FBI discovered a critical server used to carry out the attack. On Friday, it made a public announcement to owners of home and small business (SOHO) routers in the US.
However, these tips are useful for anyone with a router, as the malware has affected users in around 54 countries. It is not yet known how the malware spread.
How do these tips help?
Restarting the router will temporarily stop the malware, the FBI explains. So when it tries to reconnect, the FBI will be able to locate the infected devices and potentially track down the attackers.
The FBI also advises SOHO router owners to disable remote management settings and secure their device with strong passwords and encryption. It is a common practice for many users to leave the default username and password.
If a simple restart sounds less secure to you, the option to reset the device is always available. The process varies for different devices, so you can refer to the respective instructions.
