Wireless Router Pharming

[Carl Martin]

Another wireless vulnerability.

Sci-Tech Today | Millions Vulnerable to New Hack Attack

Have to check my router settings and change my password again. (I can think of a few appropriate "cruel and unusual punishments" that should be inflicted on these guys when they're caught!)

[garetjax]

I don't think the link you have is valid. Having trouble getting the link to work...

[Zambini]

Heres the headline and first couple Paragraphs

Originally Posted by By Elizabeth Millard
February 19, 2007 10:25AM

Millions Vulnerable to New Hack Attack


Security firm Symantec and the Indiana University School of Informatics have discovered a new type of security threat that could leave up to 50 percent of home broadband users susceptible to attack. Called "drive-by pharming," the threat is focused on home routers, which can be reconfigured and directed to a malicious Web site if default settings and passwords are being used.
With traditional pharming, an attacker redirects a user from a legitimate Web site to a bogus Web site that contains malicious code. Pharming attacks can be executed by either changing the host file on a victim's PC or manipulating a domain name system (DNS) server.

In the new scheme, when a user visits a malicious Web site, an attacker is able to remotely change the DNS settings on the broadband router or wireless access point and reroute requests for legitimate sites -- like online banking sites or financial institutions -- to bogus sites designed to steal login information.

[JazzyJake]

Sci-Tech Today | Millions Vulnerable to New Hack Attack
there's the link again, see if that works for you garetjax

yea i think castration is appropriate...

this makes me beg the question: why can't people just be nice? we wouldn't need our homes/cars to be keyed, we wouldn't need passwords everywhere, and half the obnoxious CS:S community wouldn't exsist (no hackers)
just keep the jerks out....ship em to the moon imo

[Lead Head]

This looks like its for people who don't bother to set passwords and encrypt their networks...As long as you do that, your pretty secure..

[stinger608]

Originally Posted by Lead Head

This looks like its for people who don't bother to set passwords and encrypt their networks...As long as you do that, your pretty secure..

Yep that would be the case!!! As long as you reset your user name and password on the router, and do the 128bit encryption you will be just fine.

It is an amazing thing that people don't get that done as soon as they hook their router up!!! Just in my neighborhood alone, there is 4 unsecured wireless routers that I can use there bandwidth on my laptop

[Fasttazz]

Originally Posted by stinger608

It is an amazing thing that people don't get that done as soon as they hook their router up!!! Just in my neighborhood alone, there is 4 unsecured wireless routers that I can use there bandwidth on my laptop

But you wouldn't would you? Thats not nice!!!

And don't blame "them" for not secureing the routers.

[stinger608]

Originally Posted by Fasttazz

But you wouldn't would you? Thats not nice!!!

And don't blame "them" for not secureing the routers.

No, but they still show up!! My router is much faster, with a better connection

[Zambini]

If I had a wireless, I would definitely NOT encrypt it very much. It is an excellent scapegoat for getting caught downloading illegal stuff.

not that I do.... but I know a friend who will be perfectly fine should the MPAA decide to monitor his activities.

[Panda Man]

You'd think the manufacturer would but a huge yellow slip of paper on the router that says - "CHANGE THE DAMN PASSWORD - Here's how:" in the package to help protect those that aren't as in tune with the tech world.