Posts Tagged ‘botnet’

Chuck Norris Says Change Your Router Password… or He’ll Kick Your Butt

March 30th, 2010

Recently, a new botnet (group of devices working together to attack or distribute infections to other systems) was discovered infecting everyday routers as well as enterprise routers worldwide.  This cleverly crafted infestation attacks even Linus-based devices.  Egads!  How is this possible?  Isn’t Linux immune to infection?

Not if you don’t change the default username and password combination your system shipped with, it’s not.  This is how the Chuck Norris infection attacks a system – buy guessing common username / password combinations it has in it’s database.  Incredibly simple, as most people don’t change the login security on their routers.  Most don’t even change the SSID (name that’s broadcast by your router) which makes it really easy to guess the security login if you have even rudimentary knowledge of popular routers.

Windows-based computers are inherently insecure.  Almost all viruses are engineered to attack Windows systems, as they constitute the largest percentage of computers worldwide.  That being said, it is a lot easier to infect any device if you can bypass it’s login security.  This is what makes the Chuck Norris infection to clever.  It is OS-independent.

So if you’re infected, what do you do?

Reboot your router?  Since Chuck Norris is memory resident and doesn’t alter any code – or actually “infect” your router, just reboot it.  Not sure how?  Just pull the plug.  Wait a couple of minutes and plug the power back in.  You’re now un-infected?

Want to stay that way – and keep from being hacked by every neighbor kid with a laptop?

  1. This infection also exploits a known vulnerability in D-Link routers.  If you have one, check for updates to your router and install them.
  2. Login to your router as administrator.  Find your router documentation if you don’t know how
    (whoever setup your router should have provided you with this information – we do.)
  3. Change the SSID on your router to something that does NOT give away your name, location or street address.
  4. Change the administrator user name and password for your router
  5. WRITE THIS DOWN SOMEWHERE!
  6. Reboot your router.
  7. Reconfigure all your wireless devices to talk to the new SSID.
  8. You’re secure.
1 2 3