Comments on: Malware alters DNS data on routers http://hackaday.com/2008/06/12/malware-alters-dns-data-on-routers/ Fresh hacks every day Fri, 10 Feb 2012 16:41:33 +0000 hourly 1 http://wordpress.com/ By: Chris http://hackaday.com/2008/06/12/malware-alters-dns-data-on-routers/comment-page-1/#comment-74855 Wed, 13 May 2009 20:58:30 +0000 http://hackaday.iheartcashews.com:8181/2008/06/12/malware-alters-dns-data-on-routers/#comment-74855 I see a simple way of using a captcha system to prevent attacks, even if the router has a default password. simply in addition to the normal user name and password, have a captcha field on the login screen to verify that it’s a person logging in to make the changes.

]]> By: Aa\'ed Alqarta http://hackaday.com/2008/06/12/malware-alters-dns-data-on-routers/comment-page-1/#comment-36834 Fri, 13 Jun 2008 23:08:06 +0000 http://hackaday.iheartcashews.com:8181/2008/06/12/malware-alters-dns-data-on-routers/#comment-36834 I’ve compiled a countermeasures list to stop and prevent DNSChanger

check here
http://extremesecurity.blogspot.com/2008/06/use-default-password-get-hijacked.html

]]> By: Dave http://hackaday.com/2008/06/12/malware-alters-dns-data-on-routers/comment-page-1/#comment-36833 Fri, 13 Jun 2008 05:05:08 +0000 http://hackaday.iheartcashews.com:8181/2008/06/12/malware-alters-dns-data-on-routers/#comment-36833 Monster-

If you have changed the default password for dd-wrt, you are safe from getting your router infected, even if you did install a zlob trojan as a video codec.

I doubt there’s many out there able to install dd-wrt who wouldn’t also at least change the default password to a weak one automatically.

]]> By: barry99705 http://hackaday.com/2008/06/12/malware-alters-dns-data-on-routers/comment-page-1/#comment-36832 Thu, 12 Jun 2008 23:39:03 +0000 http://hackaday.iheartcashews.com:8181/2008/06/12/malware-alters-dns-data-on-routers/#comment-36832 The Ubuntu repositories should be fairly safe. You don’t have any third party repositories do you?

]]> By: barry99705 http://hackaday.com/2008/06/12/malware-alters-dns-data-on-routers/comment-page-1/#comment-36831 Thu, 12 Jun 2008 23:37:20 +0000 http://hackaday.iheartcashews.com:8181/2008/06/12/malware-alters-dns-data-on-routers/#comment-36831 Check the routers dns settings. They should jive with your isp’s dns servers, or opendns’ servers if that’s how you roll.

]]> By: monster http://hackaday.com/2008/06/12/malware-alters-dns-data-on-routers/comment-page-1/#comment-36830 Thu, 12 Jun 2008 23:35:41 +0000 http://hackaday.iheartcashews.com:8181/2008/06/12/malware-alters-dns-data-on-routers/#comment-36830 thats easy james, just send me your credit card details, and if anyone but me empties your account you’ve been infected.

that goes for anyone =]

seriously though, this is making me nervous. i run DD-wrt on my router, but i run ubuntu on my desktop. if i need a codec i open synaptic and install it for vlc. does this mean i’m pretty secure from this bug?

]]> By: James http://hackaday.com/2008/06/12/malware-alters-dns-data-on-routers/comment-page-1/#comment-36829 Thu, 12 Jun 2008 23:18:04 +0000 http://hackaday.iheartcashews.com:8181/2008/06/12/malware-alters-dns-data-on-routers/#comment-36829 What about *detection*? How do we know if our router has been compromised?

]]>