New attack on home routers sends users to spoofed sites that push malware

Photograph of a Linksys router.

Enlarge (credit: Wikipedia)

A recently discovered hack of home and small-office routers is redirecting users to malicious sites that pose as COVID-19 informational resources in an attempt to install malware that steals passwords and cryptocurrency credentials, researchers said on Wednesday.

A post published by security firm Bitdefender said the compromises are hitting Linksys routers, although BleepingComputer, which reported the attack two days ago, said the campaign also targets D-Link devices.

It remains unclear how attackers are compromising the routers. The researchers, citing data collected from Bitdefender security products, suspect that the hackers are guessing passwords used to secure routers’ remote management console when that feature is turned on. Bitdefender also hypothesized that compromises may be carried out by guessing credentials for users’ Linksys cloud accounts.

Read 10 remaining paragraphs | Comments

Source link

قالب وردپرس

Related posts

For ZTE ZMax Pro/Blade X Max Case | Liquid Glitter Bling Cover + Tempered Glass


Google’s new $2.6-billion acquisition can’t fix its cloud-computing business


Researcher details how misconfigured Jira servers from entities like Google, Yahoo, and NASA publicly expose information about internal projects and users (Ionut Ilascu/BleepingComputer)