Router Hacking: Why Do Hackers Love Routers? A Security Expert’s Guide to Staying Safe (Home Netw...
No. 28
Hello, this is Security Expert PR.
I was just lying down at home looking at my phone and browsing the internet...
But my account information got hacked? Huh, I got a virus too...
What is this?
I never visited any strange sites and I’ve only lived a good life...
What a dirty world~ How did I get hacked?
By any chance, is what I just said your story, You, the viewer of this video?
Then you have come to the right place.
Security Expert PR will tell you everything about how your account information was stolen.
So, let's get started.
You can easily spot wired and wireless routers in homes and offices.
Right here!!
Having personal information stolen or suffering damage from malware or viruses due to router hacking is not a story of today or tomorrow.
Then why do hackers like routers so much?
It is because wired and wireless routers act as the gateway connecting your home network to the internet.
That is why they are important for security, but in reality, they are often neglected, aren't they?
Before discussing hacker attack methods, looking at the network configuration diagram of how your router is installed in your home makes it easier to understand the attack methods.
This is a common setup found in residential homes.
Using the ISP modem at the top level, the router connects the TV in the living room, computers and laptops in each room, and smartphones and IoT devices via wireless Wi-Fi.
This means that if a hacker gains admin privileges on the router, they can access every system computer, laptop, and TV inside, as well as smartphones and various IoT devices from anywhere.
What does a hacker do once a router is hacked?
If you consider what the hacker is trying to gain, you can understand how to defend against it.
The ultimate goal is money, and there is no money stored in the router, right?
However, our personal information is being exchanged.
They steal that personal information and convert it into money.
There are three main methods. 1. Interception: A significant number of router users set their wireless authentication passwords to the default or use the vulnerable WEP authentication method. This allows attackers to access the wireless network provided by the router and subsequently steal personal information, such as user account and financial data, transmitted in plain text through attack techniques like ARP Spoofing.
If a router is hacked, the hacker steals personal information through 2. Pharming.
Not the farming of collecting items or gold in games.
What is Pharming?
Attackers hack the router and alter DNS information to force smartphone users to access modified websites.
They redirect the page upon internet access to induce the user to enter personal information.
In the case of smartphones, they install APK files via modified pop-up windows guiding users through updates, infecting the device with malware and viruses to steal personal information and use it for malicious purposes. Using this method, even though the user accesses Naver or a bank site as usual, the connection path is altered to redirect them to a fake website, thereby inducing a login. Furthermore, various attacks can be carried out, such as creating new accounts by stealing authentication text messages using a malicious APK file embedded in the smartphone.
3. Exploitation of DDoS Attacks
Multiple infected routers and numerous IoT devices connected to them can be utilized as zombies for DDoS attacks.
Now, let's look at how to defend against this.
1. Configure the router so that the management page cannot be accessed from outside.
It is best to use this only when absolutely necessary and to avoid using remote administrator privileges.
For internal access security, grant access rights only to allowed IPs.
Additionally, for unavoidable external access, you must change the port to a dynamic port range instead of 80 or 8080.
2. You must change the administrator ID or password.
Initial IDs and passwords can be easily found on the internet.
Please refer to the previous video on home cams, IP cameras, and hacking.
3. Use a wireless encryption method with high security strength, such as WPA2 or higher.
4. Router firmware must be updated periodically.
5. Set the SSID so that it is not visible from the outside.
I will wrap up this video by showing you a tip on how to hide the router from the outside using SSID settings.
This is the most commonly used ip TIME product.
In Wireless Network Settings/Security, I have set the SSID name to "Security Expert."
If you check "Notify wireless network name" and apply the changes, you can see "Security Expert" appearing in the nearby Wi-Fi search results, right?
However, you can hide this part.
As you can see, it just disappeared.
This hides it so that my Wi-Fi is not detected in nearby SSIDs.
When hidden like this, if you search for "Security Expert" in "Add Wi-Fi Network,"
you can see it appear. You can log in by entering your ID and password like...