An open community 
of Macintosh users,
for Macintosh users.

FineTunedMac Dashboard widget now available! Download Here

Previous Thread
Next Thread
Print Thread
Reboot Your Router to Stop Malware
#48940 05/28/18 07:17 AM
Joined: Aug 2009
Likes: 4
grelber Offline OP
OP Offline

Joined: Aug 2009
Likes: 4

Re: Reboot Your Router to Stop Malware
grelber #48944 05/28/18 12:50 PM
Joined: Aug 2017
Offline

Joined: Aug 2017
What I’m missing from this and similar articles, is how would I know if my router is infected? That should be testable.
And what about the older routers that haven’t seen firmware updates in many years?
My ISP-supplied ISP-custom DOCSIS 3.0 router-modem has no user control for checking or updating the firmware anyway. I can only see the cryptic versioning on the information page, and a current 25-day uptime.
Enough people have a crappy connection that has to be rebooted sort-of regularly, are they already safe? How does a reboot help anyway (wouldn’t the malware continue after reboot)?
The reporting is a bit thin, if I may say so.

Re: Reboot Your Router to Stop Malware
Urquhart #48946 05/28/18 07:38 PM
Joined: Aug 2009
Offline

Joined: Aug 2009
Hmmmm?

I cannot say with complete confidence that the issue is real or not. It LOOKS pretty authentic with the links, etc., but given all the bad PR lately with Trump, Russia, FBI changes, and the like, this could simply be a hoax or some kind of damage-control publicity stunt.

I would think IF the problem were that serious, an explanation WOULD be given as to how to check to see if one's own router were at risk in the first place. Simply turning off and on seems way too simple a solution for something which - potentially - could have very serious consequences.

Who really knows? Colour me sceptical.

Re: Reboot Your Router to Stop Malware
MG2009 #48947 05/28/18 10:00 PM
Joined: Aug 2009
Likes: 16
Moderator
Online
Moderator

Joined: Aug 2009
Likes: 16
Wikipedia has an informative article on Fancy Bear, APT128, Pawn storm, Sofacy Group, Sednit and STRONTIUM (all are apparently the same group behind the current threat) with years of documented attacks around the world as well as a non-technical description of their methods of attack. They are noted for their ability to defeat anti-malware efforts targeted at their "products" within an hour of the anti-malware's release. There is reason to believe their "products" are capable of successfully hiding from anti-malware software as well.

I don't know enough about. the threat to know how it is propagated or how it works to comment knowledgeably, but there is also the possibility that like the ongoing vulnerability of Intel, ARM, an other CPUs a permanent "cure" or "protection" will require developing and replacing hardware, firmware, and existing internet protocols.


If we knew what it was we were doing, it wouldn't be called research, would it?

— Albert Einstein

Moderated by  alternaut, dianne, MacManiac 

Link Copied to Clipboard
Powered by UBB.threads™ PHP Forum Software 7.7.4
(Release build 20200307)
Responsive Width:

PHP: 7.4.33 Page Time: 0.026s Queries: 22 (0.018s) Memory: 0.5844 MB (Peak: 0.6425 MB) Data Comp: Zlib Server Time: 2024-04-23 16:11:34 UTC
Valid HTML 5 and Valid CSS