The FBI Wants You To Reboot Your Router

The FBI wants you to reboot your router. In a FBI Public Service Announcement, the FBI recommends that you reboot your home router due to the VPNFilter malware. The VPNFilter malware has already infected an estimated 500,000 routers worldwide. (VPN Filter Malware)

Why Should I Reboot My Router?

If your router has been infected, the VPNFilter malware has the capability to receive a command that will overwrite the instructions that make your router work, with the VPNFilter’s own malware instructions. In the case where the VPNFilter malware receives this command to overwrite your router’s instructions, your router will become unusable.

The VPNFilter also has the functionality to collect your Internet traffic such as websites visited and passwords.

The FBI Wants You To Reboot Your Router

The FBI has seized a set of Internet IP Addresses used by the VPNFilter malware. If your router is infected, rebooting your router will make an infected router call out to the Internet for instructions, allow the FBI to intercept that call, and keep your router from becoming reinfected.

The simplest way to reboot your router is to unplug it for 30 seconds and then plug it back in.

This includes any Internet Modem Router WiFi combo devices that you may use with your Internet provider. If you only have one device that delivers Internet to your home, you probably have an Internet Modem Router WiFi combo device.

You should also reboot your QNAP network-attached storage (NAS) devices. The VPNFilter malware has also affected some NAS devices.

This is a great opportunity to make sure you have a strong password for your router and you have the latest updates installed on your router. See your router’s instructions if you don’t know how to make these changes.

FOREIGN CYBER ACTORS TARGET HOME AND OFFICE ROUTERS AND NETWORKED DEVICES WORLDWIDE

SUMMARY

The FBI recommends any owner of small office and home office routers power cycle (reboot) the devices. Foreign cyber actors have compromised hundreds of thousands of home and office routers and other networked devices worldwide. The actors used VPNFilter malware to target small office and home office routers. The malware is able to perform multiple functions, including possible information collection, device exploitation, and blocking network traffic.

TECHNICAL DETAILS

The size and scope of the infrastructure impacted by VPNFilter malware is significant. The malware targets routers produced by several manufacturers and network-attached storage devices by at least one manufacturer. The initial infection vector for this malware is currently unknown.

THREAT

VPNFilter is able to render small office and home office routers inoperable. The malware can potentially also collect information passing through the router. Detection and analysis of the malware’s network activity is complicated by its use of encryption and misattributable networks.

DEFENSE

The FBI recommends any owner of small office and home office routers reboot the devices to temporarily disrupt the malware and aid the potential identification of infected devices. Owners are advised to consider disabling remote management settings on devices and secure with strong passwords and encryption when enabled. Network devices should be upgraded to the latest available versions of firmware.