New Worm Exploits Issue with Linksys Home Routers

Thanks to Mark Minasi (http://www.minasi.com) for bringing a new issue to our attention related to Linksys Home Routers.
This is by FAR one of the most popular brands out there when it comes to home routers, so it is probably a good idea to check if one of these is in your house (or heaven forbid your office!).

It seems if remote administration has been enabled, there is a flaw in the software that will allow a malicious individual to take over the device and put their own version of software on it which will then set your router to scan millions of IP addresses looking for other routers with the same issue. This can happen even with an extremely strong password in place. The net effect is DRASTIC slowdown in your Internet speed (because your router is busy trying to infect other routers).
https://isc.sans.edu/forums/diary/Linksys+Worm+TheMoon+Summary+What+we+know+so+far/17633

The fix is to simply install the latest firmware which patches the issue, but I’d bet that >90% of Linksys routers installed in people’s homes never EVER have had a firmware update.

If you think you may be affected and need help, let us know – updating firmware is relatively easy to do, but is probably best handled by a professional.

Share
itSynergy

itSynergy

itSynergy specializes in delivering tailored cybersecurity and IT compliance solutions for Registered Investment Advisers (RIAs). With deep expertise in SEC regulations, we help RIA firms build robust, audit-ready programs that meet evolving cybersecurity expectations. From risk assessments and vendor oversight to incident response planning and user training, itSynergy translates regulatory requirements into practical, business-focused strategies that keep your firm secure and compliant.