NOW READ THIS
("Security Advisory")

Go Back

---

Submitted by: Bill Hickey
NCVA List Master

NRT-0056 Wireless Router Security:

Researchers at Symantec and Indiana University say if you have never changed the default password on your home router, you should do so NOW. The researchers published test results that show how attackers could take over your home router using malicious JavaScript code. For the attack to work, the bad guys would need a couple of things to go their way. First, the victim would have to visit a malicious Web site that served up the JavaScript. Second, the victim's router would have to still use the default password that it's pre-configured with out of the box. In tests, the researchers were able to do things like change firmware and redirect a D-Link Systems, Inc. DI-524 wireless router to look up Web sites from a DNS (Domain Name System) server of their choosing. Once the router has been compromised, victims can be redirected to fraudulent web sites. The researchers blame router makers for shipping products with "poorly secure default settings."

(IDG News Service 15FEB07)

Last Modified: Friday, 23-Feb-2007 09:06:53 EST