3 ms·

Does anyone know if this affects routers flashed with LEDE/DD-WRT?

by wpdev_63 8y ago

Kenji 8y ago
Yes and how do we find out if we're infected? It can't be that hard, now can it? Once you know what you have to be looking for - it has to be some kind of file or altered binary since stage 1 is persistent.
mikehotel 8y ago
Forums don't have anything definite yet, but you can check existing network connections (netstat/iftop) and block the known CC domains. https://forum.lede-project.org/t/cert-advisory-vpnfilter-destructive-malware/14766/5 https://forum.lede-project.org/t/cert-advisory-vpnfilter-des... A comment on another forum suggests OpenWRT/LEDE is not affected due to file system layout differences: https://nakedsecurity.sophos.com/2018/05/23/vpnfilter-is-a-malware-timebomb-lurking-on-your-router/#comment-5082031 https://nakedsecurity.sophos.com/2018/05/23/vpnfilter-is-a-m...