How secure are the Hub 2 routers and ways to keep them secure?

[#1]

Hi,

I was just wondering if anyone can tell me whether it's possible for the latest Hub 2 router to be hacked? I got Plusnet broadband last month and I think the router is a Hub 2...it's a white rectangular box with a blue circle in the middle.

I've gone in to a bit of a panic because one of the house's computers got malware from a work USB stick and now I'm wondering whether it's possible for hackers to access the wifi details (wifi code and password) via this computer and target and access the other devices in the home...is that even possible?

If it is possible then what should I do in regards to securing the router and the other devices accessing it?

Is there a way to see if unknown devices are using the wifi?

Does the Hub have built in security and does it update itself?

Thanks

[#2]

@Frosta It will be a Hub2.

It depends on what the malware was as to what it can do - although I am really surprised a 'work' pen-drive was carrying such, works IT security must be poor.

Yes, you can see what other devices are attached to your home network on the Hub, but as I have never used one, I can't direct you to the correct page to show this - sorry.

[#3]

While it's not impossible to hack an ISP router it's not high up the list of risks you have with your current situation.

The computer with malware would be the thing that transmitted a virus or other problem to all the other devices on your network.

That has either happened or not by now.

Any device on a Plusnet router will typically be able to see and communicate with all other connected devices.

There is a web page on the router that shows what is connected "inside" your network. This wouldn't show "a hackers device" anyway and investigating connections from a machine to the wider Internet will be tricky.

I would be suspicious of the other computers, a bit less so of devices such as phones & tablets unless they show signs of problems.

The ideal answer is a clean install of all computers and at least the one with the virus although the various virus checkers often do a decent job of dealing with infections.  

The hub does get occasional firmware updates but I don't see it as your problem.

[#4]

No worries...I think what I'm most concerned about is is it possible for someone who has accessed your wifi log in details to then somehow be able to see every other device using that wifi and in effect control those devices and log in to things like banking apps or shopping apps to steal money and data on those uninfected devices...I understand it's possible through the computer they've hacked but what about the uninfected devices using the same wifi?

I know it's probably very hypothetical but it got me thinking and curious about what security measures the Hub 2 has and what users can do to prevent unwanted access.

[#5]

Many thanks. When you say "

The computer with malware would be the thing that transmitted a virus or other problem to all the other devices on your network.

That has either happened or not by now."

I'm not seeing strange behaviour and curious to know, how would the computer with the malware send the problem to the other devices if it wasn't via the wifi? 

[#6]

A scan of your computers with the free version of Malwarebytes may put your mind at rest.

Have you advised your firm that a USB stick with malware has been attached to their network.?

Just think of the months of malware issues that occurred with JLR ( all car production stopped )
and M&S or the co-op ( shelves empty , no online orders ).

Reporting this as an issue is better than a 3 month enquiry that puts you in the frame.

[#7]

Yes they are aware. Thanks for the Malwarebytes tip

[#8]

@Frosta   Welcome to the Plusnet Community Fora.

If you think about it, if the malware has access to one computer on a network then it doesn't need the wireless SSID and password to gain access to other devices on the same network. I have never heard of malware that works this way and suspect that such a scenario is highly unlikely.

I assume that you have removed the infected device from your network and left it in isolation until it is thotoughly cleared of infection?

If it was me I would also run a full antivirus scan on all critical devices connected to your network. I would also advocate ensuring that every such device has a professional quality AV security suite installed set to check any new attached devices such as USB memory sticks for nasties before opening them. 

[#9]

Thanks. Yes the device is no longer online. So it's not worth changing the router password? 

[#10]

It's always worth changing the router password. And all your other passwords. And don't reuse any passwords - every password should be different to minimise the impact of any one password being compromised.