4 ms·
If you're infected, you need a new router. Period. Telling people that they can resecure their routers with just a reboot is irresponsible.
by ashleyn 8y ago
If you're infected, you need a new router. Period. Telling people that they can resecure their routers with just a reboot is irresponsible.
- Godel_unicode 8y agoThe reboots are about making the infected routers hit the C2 server so that ISPs can identify and notify users whose routers were infected.
- beager 8y agoIt’s the most accessible way to do it. Most people don’t buy their routers, they lease from the ISP. Major ISPs replacing 100k+ devices will take a while and they’ll drag their feet. FBI commandeering the C&C domain and instructing users to reboot is not the long term fix but it is most effective
- userbinator 8y agoI wonder how the cost-benefit analysis goes between creating yet more e-waste, and letting some malware persist...
- ashleyn 8y agoIt'd be a lot better of a situation if router boards were designed to accept firmware upgrades at a low level. After an attack, you often need to use the software updater to reset it. That can no longer be trusted if it's compromised. Consumer-level routers have been very low-quality for quite a while.
- Nomentatus 8y agoI'm partly with you - they don't seem to know what the initial vulnerability was, so just blocking this version of the malware is not sufficient; but by the same token, they'll want to at least find out what the vulnerability was and have a fix before advising consumers replace modems. Clearly, we need laws outlawing the cheap-ass modems we know have and mandating far more secure, easily firmware-updated ones.