Hack Lets Intruders Sneak Into Home Routers

[F1]

Attackers could change the configuration of home routers using JavaScript code, security researchers at Indiana University and Symantec have discovered. The researchers first published their work in December, but Symantec publicized the findings on Thursday.

The researchers found that it is possible to change the DNS, or Domain Name System, settings of a router if the owner uses a connected PC to view a Web page with the JavaScript code. This DNS change lets the attacker divert all the Net traffic going through the router. For example, if the victim types in "www.mybank.com," the request could be sent to a similar-looking fake page created to steal sensitive data.

C/Net

[cauzomb]

I use my own dns server because of this.

[DeShock]

This is why you never leave your settings on "default". The hackers are looking for easy pickings and there are plenty of those to be had. Neither user nor password are default for my router.

[Blue_Geek]

could you please explaine it in detail please . reallly sounds interesting . actually can you please tell us hoe to fix this matter. thanks.

[PhilliePhan]

could you please explaine it in detail please . reallly sounds interesting . actually can you please tell us hoe to fix this matter. thanks.

There is a link at the bottom of the article that shows how to change Linksys password. If you have different router, you ought to be able to find similar instructions:
http://linksys.custhelp.com/cgi-bin/...p?p_faqid=3976

PP