dray teck routers

[#1]

DrayTek has issued a warning on their website, their vigor routers are susceptible for hacking

More than 700,000 devices are potentially affected. WOW

http://www.guru3d.com/news-story/over-700-000-draytek-routers-suffer-from-zero-day-attack.html

[#2]

@rongtw

Thanks for that although I'd already seen it elsewhere. 

I'm not sure what the present situation is with the whole range of DrayTek routers, but there's a new firmware available for the one I use (Vigor 2920Vn) as of yesterdays date which includes a fix for the DNS hijacking problem, so Brownie points awarded to DrayTek.

A couple of links for DrayTek users;

Main FTP site to download firmware   ftp://ftp.draytek.com/

Vigor 2920 series users   ftp://ftp.draytek.com/Vigor2920/

Edit:  it seems I was being a bit hasty in calling the new firmware a fix, here's a quote from the release notes:

 This firmware includes improvements to harden the web interface against attacks. We

have become aware of specific attacks against router, including DrayTek models where

hackers have altered specific settings relating to your DNS servers and DHCP settings.

You should urgently check those settings on your router. If they appear to have been

tampered with, correct them and change your admin password and for any other config

anomalies. Restore a config backup if you have one (from prior to the attack). We

continue to investigate this issue but the first priority was to issue updated firmware.