Can my home router firmware be compromised by malware?

3

For a while now I've been almost certain this is the case. Definitely, at some point, malware on my stepkid's laptop gained access to the home network and managed to change some settings.

Router is a D-Link DIR-615.

ixtmixilix

Posted 2010-12-30T00:01:34.833

Reputation: 308

3

You're gonna want to reset the router to factory settings.

– digitxp – 2010-12-30T00:12:02.770

7Not sure why this is off topic... I don't think it is... – BloodPhilia – 2010-12-30T00:18:24.113

Answers

5

Not an easy way. I would recommend downloading and installing the latest firmware for it. The exact file will vary depending on the version of DIR-615 you have. After doing that I would recommend that you:

  • Change the administrative password using a strong password
  • Secure the the wireless with WPA. WPA 2 if supported.
  • Be sure that remote administration is disabled
  • Setup the router to use a third-party dns ala google dns or opendns
  • Save a backup copy of your settings
  • Disable UPnP

Doing these things will help secure your router, but in the event that it is compromised you should be able to compare the settings with your backup copy and verify your DNS is going through Google or OpenDNS.

sdanelson

Posted 2010-12-30T00:01:34.833

Reputation: 326

2Note that the administrative login and password should follow best practices and make sure to turn off UPNP (universal plug and play) on the router software. – Blackbeagle – 2010-12-30T01:52:13.180

Made edits to reflect your comment. Completely agree. – sdanelson – 2010-12-30T02:02:29.740

Nice summary. +1 for WPA2. – None – 2010-12-30T03:30:44.723

1

Yes, your router can be mangled by malware, either by settings getting changed, or even bogus firmware loaded into it.

If you believe it has been hacked, take the possibly infected computers off the network, then reset the router to factory defaults and then change the admin password and disable remote administration. If there are firmware updates available, download and install them, again making sure that the admin password is different from default and remote admin is disabled.

Shannon Nelson

Posted 2010-12-30T00:01:34.833

Reputation: 1 287