NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

DERoss's avatar
DERoss
Apprentice
May 23, 2018
Solved

VPNFilter Destructive Malware

Windows 7 Netgear N300 Wireless Router Model WNR2000v5 Firmware V1.0.0.64  GUI V1.0.0.204   US-CERT (an agency within the U.S. Department of Homeland Security) issued an advisory this morni...
  • johngm's avatar
    johngm
    Jun 21, 2018

    You should be all set with that FW revision.   In this case we were informed by a third party and law enforcement that some unknown number of our devices including but potentially not limited to a list we were given, had been corrupted by a known hacking organization.   We were not told anything more than that, other than a reboot would either clean the device or have it identify itself to a server which had been set up by the FBI as a honey pot.   Any devices which exhibited this behavior would be handled by the FBI.  

     

    From what we could determine, we believe that our devices on current firmware releases, were probably not impacted but we simply did not have sufficient data to confirm this.   Our advice to our customers was to follow the best practices we have communicated, including changing default passwords, making sure remote management is disabled and having the product on the most recent firmware.  

     

    By following the procedure outlined you probably reset an uninfected device, but we do have to rely upon the FBI to run down any units which this remediation did not address.