I’ve been experiencing some problems in the last couple of months with my connection, and I accidentally discovered in my router’s panel that my DNS server was changed from 8.8.8.8/8.8.4.4(Google DNS server) to something else(starting with 129 I didn’t write it down), I tried to change it back but after a few days it was changed again.
I did a full scan with Avast but nothing was found. Even tried malware bytes’s free tool, which didn’t found anything.
I made some research and I discovered this was caused by some script using certain router’s vulnerability to inject a custom DNS domain. The main solution proposed in these articles was to update the router’s firmware, unfortunately, it seems like my router’s firmware was never updated(it nots exactly the latest model).
Is there a workaround for this, without buying a new router?
Yes, the problem with this vulnerability is that the “hacker” / bot can download the router’s configuration(which includes the password) without any authentication process, so it doesn’t really matter how good the password is.
Hi, Just changing the router settings and password is not enough. There are a couple of things you should do solve this problem
first change your router admin password for your access. The default password is known to everybody including you. Change this with alphanumeric and note it down for opening your router page.
if there is remote access is enabled, pl disable it. Pl disable upnp in your router. Then check the router with shield up. It is free site, will show you common port trust. If everything is shown as stealthy. It will resolve dns change vulnerability once for all.
Just update the router, to solve more problem as your ISP or vendor would not have enabled router updates. If you are having updates , just do it from the page of your router in proper page, where you find update buttons available.
as a last resort download simple port forwarding from pcwintech, then it will auto open your router, just update it . If does not shown the router, a blank page, then you have to manually download and update. If the router is captured by the tool then, it will autoupdate and your problem will be solved
The link is here: http://www.simpleportforwarding.com/
I have the same problem , and i resolved using this tool, which is very easy to use
Reset the router and changing passwords didn’t solved anything, the router probably got infected in its firmware, which was already the latest available, no further firmware updates were released for that router model for years.