D-Link Forums

The Graveyard - Products No Longer Supported => Routers / COVR => DIR-855 => Topic started by: nrms on March 24, 2009, 02:46:21 PM

Title: Worm Infecting Routers - dLink vulnerable?
Post by: nrms on March 24, 2009, 02:46:21 PM

Quote from PC Magazine:

"Researchers at DroneBL claim the worm, called psyb0t, is the first of its kind and has infiltrated an estimated 100,000 devices (routers).  According to a post on the DroneBL site, the botnet has already been used to carry out distributed denial-of-service attacks and is thought to have the ability to use deep-packet inspection to harvest user names and passwords.

Vulnerable devices include any home router or modem that uses Linux Mipsel, and has an administration interface, sshd, or telnet in a DMZ, and has a weak password..."

Do any of dLinks routers fit into this category?

Thank you
NigelS

Title: Re: Worm Infecting Routers - dLink vulnerable?
Post by: Lycan on March 24, 2009, 04:00:23 PM

With the exception of a few lower end routers, D-Links main line of routers are Ubicom IPoS based.

Title: Re: Worm Infecting Routers - dLink vulnerable?
Post by: nrms on March 25, 2009, 01:26:11 AM

thankyou.  I have just upped the PW security to 378 bit strength, and I don't have remote administration option set, so hopefully I should be relatively safe; but a worrying development nevertheless. 

Title: Re: Worm Infecting Routers - dLink vulnerable?
Post by: Lycan on March 25, 2009, 08:36:41 AM

I don't think you have anything to worry about. Our products rarely use linux based OS's currently.

Title: Re: Worm Infecting Routers - dLink vulnerable?
Post by: smlunatick on March 26, 2009, 10:50:40 AM

Quote from: Lycan on March 24, 2009, 04:00:23 PM

With the exception of a few lower end routers, D-Links main line of routers are Ubicom IPoS based.

I would be nice to know a list on which routers that could be affected.  The worm is supposed to be spreading.

Title: Re: Worm Infecting Routers - dLink vulnerable?
Post by: EddieZ on April 13, 2009, 11:49:42 AM

You can have a look around on the internet to compose a list of manufacturers. Most of Linksys' routers are potentially affected. AFAIK no Dlink consumer routers run Linux so none of the Dlink routers is affected.