Slashdot Mirror
VPNFilter Can Also Infect ASUS, D-Link, Huawei, Ubiquiti, UPVEL, and ZTE Devices (bleepingcomputer.com)
Catalin Cimpanu, writing for BleepingComputer: The VPNFilter malware that infected over 500,000 routers and NAS devices across 54 countries during the past few months is much worse than previously thought. According to new research technical details published today by the Cisco Talos security team, the malware -- which was initially thought to be able to infect devices from Linksys, MikroTik, Netgear, TP-Link, and QNAP -- can also infect routers made by ASUS, D-Link, Huawei, Ubiquiti, UPVEL, and ZTE. The list of devices vulnerable to VPNFilter has seen a sharp jump from Cisco's original report, going from 16 device models to 71 -- and possibly more.
PFSense and Routerboard then huh? ;-P
They authored the malware. It's a dog-eat-dog world....
I have both a Synology router and NAS and find it curious this entire brand is omitted from getting infected. Thoughts on why this Chinese-made brand isn't affected?
why hack something with backdoors ;~)
Does anyone know if this enters through the stock firmware, or is it a lower level attack? What if we're running DD-WRT or Tomato on one of these routers?
It would be nice to have modem adsl with openwrt ...
I read because QNAP and the other mentioned models used BusyBox for their userland, and likely a vulnerable version. Synology uses discrete Linux binaries for its userland, so it wasn't vulnerable because of this.
I would say that Busybox is a good product, but there have been some CVEs last year which required updates.
Synology is a Taiwanese company, so I fear it less than a company on the mainland.
hardware is pretty much all the same, and apparently the core software is also a reference design, with the brand tricks all of the include.something variety.
if this is supposed to be a new economy, how come they still want my old fashioned money?
Sure it is.... if you're an expert on programming and network security, you've personally audited all of the code and compiled all of the executables yourself with a compiler that you've somehow managed to ensure has not been compromised.
Otherwise, it's a roll of the dice.
I don't see it on the list, and I'm pretty sure that they write their own Firmware. Never heard of an exploit of an Apple Router. Ever.
Apple, PLEASE come back to the Router Business!!!!
And, while you're at it, please add AirPlay 2 support to the AirPort Express 2 Router/DAC!!!
My Asus router has to run an older firmware version because the LTE USB modem I use for internet doesn't work with the latest firmwares. And yes I run one of the third-party firmwares which incidentally just announced they were no longer going to update this router anyway. No matter what, this Asus is a dead end even though it works just great.
My backup router is a Netgear which also happens to be on the hit list, yay, but it doesn't work with the LTE modem so it can't be a frontline device anyway.
The LTE modem is a ZTE with an internal router so it may also be vulnerable. The fun never ends.
All of this is sending me screaming out to Microcenter to find something that doesn't suck .... and whimpering back into the maw of Comcast so I can ditch the ZTE LTE modem. Dammit.
Sig for hire.
I guess it's not either 1) or 2), but both.
I have an Asus RT-N66U running Advanced Tomato.. Would it be affected with this issue???
THANK YOU, Edward Snowden!! Americans owe you a debt of gratitude (whether they know it or not..)