That Russia Router Malware Threat Might Be Worse Than Feared!

In some cases, a full factory reset may be required.

- Brad Chacos and Michael Simon

Your gateway to the Internet may be the portal that foreign hackers are using to snatch your data. The FBI recently issued a security notice (go.macworld.com/ cyba) warning that all home and small office routers should be rebooted after Cisco’s Talos group (go.macworld.com/cstl) discovered sophisticated Russian-linked “VPNFilter” malware infecting at least 500,000 networking devices.

Here’s what you need to know about VPNFilter and the FBI’s guidance to reboot your router—which might not even safeguard against the malware completely.

WHAT’S THE THREAT?

Since all your Internet and local network traffic flows through your router, it can be pretty severe.

“VPNFilter is able to render small office and home office routers inoperable,” the FBI warns. “The malware can potentially also collect information passing through the router.”

Routers are especially ripe targets for hackers because they usually connect directly to the Internet and aren’t often protected by your PC’s antivirus or other security solutions. Most people don’t install router firmware updates, either, which can leave vulnerabilities exposed. VPNFilter also encrypts its network traffic, which can make detection even more difficult, the FBI says.

Most recent infections observed by Cisco occurred in Ukraine, however, and the Justice Department (go.macworld.com/ jsdp) connected VPNFilter to “Sofacy Group,” an espionage group associated with Russia.

THAT DOESN’T SOUND SO BAD