If you own a wireless router....

[thewayne]

PLEASE CHANGE THE DEFAULT ADMINISTRATOR PASSWORD if you haven't already. There's a new attack going around where, if you go to a corrupt page, it launches a malicious script on your PC that tries to identify your wireless router and change the administrator password. If it succeeds, it then becomes a base layer for phishing attacks by redirecting your attempts to access financial accounts to servers under the attacker's control. In such cases, if the cloned sites are done well (and with the amount of work that this attack requires, they'll probably be done well), you may not know that you're not on your bank's web site.

There are two obvious solutions. First, make sure that your administrator password isn't the default factory setting. Second, don't go to such web sites that these attacks are launched from. Unfortunately it's not easy knowing where such sites might be lurking. I think that part of the reason that I've been virus-free for so long is that I don't go where angels fear to tread and I'm not constantly downloading programs and toolbars. But maybe I'm just lucky.

---

OK, I mis-read the article. This is a proof-of-concept, i.e., someone created this attack and proved it viable. This does not mean that it exists in the wild. Still, you should change the default password on your wireless router.

Comments

[thewayne.livejournal.com]

I should add that when I have been able to connect to wireless routers that show default SSIDs, such as Linksys, I have frequently been able to get into their configuration because of people not changing their admin passwords. I have been nice enough not to change anything because technically in doing so I was trespassing/hacking. They were at the total factory default configuration, not a pretty sight.

[annaonthemoon.livejournal.com]

actually, that reminds me..when i was at SA's at the beginning of the month, we were trying to configure the linksys, and kept getting to rhe admin/pass for a linksys wit hthe default SSID and it wouldn't let us in. I finally discovered the problem, when I realized it was showing the wrong model number at the log in prompt....we had been trying to log into the neighbor's network! (and this happened before we realized we didn't need a password, so it's possible we could have logged into the router by not putting in a password)

[thewayne.livejournal.com]

LOL! That's really funny! I've seen it, for example, my nieces had accessed the internet at my parent's, but in reality they were accessing an unsecured neighbor's house as my dad's router cloaks the SSID, not to mention the WPA passphrase.

[annaonthemoon.livejournal.com]

Oh, whenever I'm in AA, my wireless goes CRAZY picking up a whole slew of networks. Most have a low signal so I can't connect to them, but occasionally I can get on them.

And there's a restaurant in my hometown that leaves their router open, and my friends and I are prone to hanging out there late at night, and suddenly, we get online.

Although the best was when I needed internet access once, so I pulled into a hotel parking lot. I literally sat in the lot and accessed their network.

[thewayne.livejournal.com]

Our school has wireless all over campus, but it isn't open to non-students/employees. Wendy's used to have wireless as did Quizno's (but Q had an equipment failure, I don't know if they ever got that fixed.) The city library has wireless, but you have to have a library card; they also did a bad job selecting channels and have an overlap (only use channels 1, 6, and 11). The oddest was finding open wireless IN THE MALL! I don't know if it's still there and open as I haven't taken my laptop in there in quite a while and my Palm TX, which has 802.11g, has been dead for a while.

[annaonthemoon.livejournal.com]

oh i found wifi in the mall once, too. It was an accident. I had my laptop and was working on something while i waited for afriend,and my wireless auto detected and connected!

in Ann Arbor, there's free wifi access points all over the place except on campus, where you have to be a student. The library will even issue you a temporary password to use if you don't have a library card.

they even have wifi at some of the rest areas on the turnpike!

[thewayne.livejournal.com]

Ooooh - VERY dangerous having your machine configured to auto-connect! Your basic problem is that you don't know what you're talking to. Yes, it's a WAP, but it is trivial to put a key logger behind it. They have also demonstrated that if your PC is not properly defended, once you're connected, it's not difficult to compromise your computer!

If you do use public WAPs that you don't know who is running them, NEVER do anything that requires a password, ESPECIALLY banking!

I'm not too concerned, personally, because I use Zone Alarm Pro and am always fully updated (yes, I could get caught by a theoretical zero day exploit) and my wife uses a Mac, which is much stronger security-wise. But NEVER do financial or other important stuff over open WAPs that you don't personally know!

[annaonthemoon.livejournal.com]

It was on my old laptop,which long story short, someone had put one of those lojack for laptops things on it to know where I wasat all times - while I thought they were helping me by fixing my laptop. Ah, the things you find out.