VPNFilter malware protection for FiOS routers

DougK3
Newbie

This just released malware targets routers. What make/model routers does FiOS use and has Verizon completed patching? What do customers need to do to verify their systems are protected?

0 Likes
Reply
1 Solution
CRobGauth
Community Leader
Community Leader

Verizon uses several different models.

All by ActionTec.

Would need to see if this vulnerability affects them.

View solution in original post

40 Replies
jonjones1
Legend

@suzontravel wrote:

Hi,

I reset my Quantum Gateway router with the red button on the back, made sure auto refresh was turned on and changed the original issued PW to a new one. Sgould I power cycle it just to be safe? Will the PW change prevent the firmware updates that Verizon pushes out to their routers since Verizon does not know the PW now??

Thanks.

Susan


Nope the password change will not affect any Verizon firmware updates.

Since it was reset no need to unplug etc. 

0 Likes
Reply
DFVerizon
Newbie
I want to change the password on my Verizon Quantum Gateway router. But when I go to myfiosgateway.com to login to do this, my browser warns me that the connection is not secure, and that credentials entered on the page could be compromised. And there is a red slash thru a the padlock in the address bar. The page is this: http://myfiosgateway.com/#/setup Has anyone else encountered this? Is there other way to access the router? I already unplugged and replugged in; I guess I will also do a reset with the power button. But I don't know how to check if auto-refresh is turned on - I guess I have to be logged in to do that? And I can't change the password without logging in, but the login page is, as I've said, not secure. Thank you!
0 Likes
Reply
jonjones1
Legend

https://www.verizon.com/cs/groups/public/documents/adacct/fios-qgr-userguide1409251.pdf

192.168.1.1 

then change the password there. Follow the instructions in my link above.

0 Likes
Reply
DFVerizon
Newbie

Thanks - I still get the padlock with the red slash when I go to 192.168.1.1, but Verizon says it's a browser quirk, and I should ignore it.  I changed the password.

Thanks!

0 Likes
Reply
gailq
Newbie

The FBI recently issued a security notice warning that all home and small office routers should be rebooted after Cisco’s Talon groupdiscovered sophisticated Russian-linked “VPNFilter” malware infecting at least 500,000 networking devices.

 

They also suggested a factory reset of the router and loading new firmware. Does Verizon FIOS have any guidelines on how to do that on the various Routers they provide with their service? II have a a Router supplied to support the Quantum service

0 Likes
Reply
jonjones1
Legend

@gailq wrote:

The FBI recently issued a security notice warning that all home and small office routers should be rebooted after Cisco’s Talon groupdiscovered sophisticated Russian-linked “VPNFilter” malware infecting at least 500,000 networking devices.

 

They also suggested a factory reset of the router and loading new firmware. Does Verizon FIOS have any guidelines on how to do that on the various Routers they provide with their service? II have a a Router supplied to support the Quantum service


Simply unplug it and plug it back in to refresh it. To factory reset take a pen or paperclip and insert in reset hole on back of router.

firmware updates can not be done via customers on Verizon routers. Only Verizon can do that. 

0 Likes
Reply
CRobGauth
Community Leader
Community Leader

A person in our IT security department at work has Quantum router.

He agreed with me that there haven't been any reports that the Greenwave router was compromised.

0 Likes
Reply
SpeedThree
Contributor - Level 1

Fortunately, at the bottom of this site where routers vulnerable to the VPN filter are lised, Actiontec routers do not appear.

https://blog.talosintelligence.com/2018/05/VPNFilter.html

That said, I am familiar with the basics of accessing and changing settings on my Actiontec M1424WR Rev I GigE, but at the same time I realize that a little knowledge is a dangerous thing and undestand that I could really foul things up if I toyed with the wrong settings.

Would anyone be willing and able to offer suggestions on settings I might change on this particular router in order to better enhance my security?

Many thanks.

0 Likes
Reply
dfranzo
Newbie

Are the Verizon routers / set top boxes suseptable to VPN Filter Malware?

0 Likes
Reply
jonjones1
Legend

@dfranzo wrote:

Are the Verizon routers / set top boxes suseptable to VPN Filter Malware?


No someone here in another thread had a list and neither Fios Quantum Gateway Router or the Actiontec are listed.

0 Likes
Reply
exPresAppeals
Newbie

I'm not so sure that list was definitive...it'll probably grow.  Or someone will fork the malware into something that can exploit VZ routers.

0 Likes
Reply
Shanovan
Newbie

Break--Break....

Why isn't VERIZON itself not putting out more official information & guidance on this??

Seems like a pretty big deal, and this service provider is not exactly cheap.

0 Likes
Reply
jonjones1
Legend

@Shanovan wrote:

Break--Break....

Why isn't VERIZON itself not putting out more official information & guidance on this??

Seems like a pretty big deal, and this service provider is not exactly cheap.


Because it is not something affecting their routers or network.

why alarm folks over nothing?

0 Likes
Reply
CMeckstroth
Newbie

Note that as of June 1, VZ has put out a rather vague VPNFilter advisory with a blanket recommendation to reboot, in broad context of "the various routers we provide." It neglects to say when or how often.

https://www.verizon.com/support/residential/announcements/important-information

Given the way VPNFilter is moving, I'd like to see much more from VZ, to the effect that they are actively monitoring and ensuring their device OEMs are working to keep their firmware ahead of the threat, including specific dates on which each VZ router brand-name has been remotely updated, if that is the case. Rebooting prior to such a date won't help much.

This appears to be a hostile nation-state attack, and it may only be a matter of time until they move across the less common devices. 

https://blog.talosintelligence.com/2018/06/vpnfilter-update.html

0 Likes
Reply
msg160
Newbie

I agree and am concerned with relative silence from Verizon on this VPNflter malware and othr security issues, which I hear about nearly every day in other forums.   Internet security and communication with customers should be high priority and I have received nothing from Verizon about this.  I would rather be proactive than try to clean up a mess.

0 Likes
Reply
msg160
Newbie

...and why is this flagged as solved??? it's actually evolving.

0 Likes
Reply
jonjones1
Legend

@msg160 wrote:

...and why is this flagged as solved??? it's actually evolving.


Because the original question was solved to the original posters satisfaction.

the additional comments and solutions were just thread hyjacking.

0 Likes
Reply
DougK3
Newbie

I posted it solved because I was asking what Verizon equipment was  or would be patched. At this point it appears the answer is none.

I appreciate all the other comments since I believe this is a major problem. All the ISPs should take responsibility for their customer equipment security. We are paying for this service.

0 Likes
Reply
GNBear
Enthusiast - Level 1

Dear Good People of this Verizon Customers' Community (which I just joined):

Aren't we all concerned about the FBI's warning that malware is infecting many American routers?! Are we following their advice to reboot our routers and update the firmware and strengthen our usernames and passwords? Here's an article from The New York Times:

https://www.nytimes.com/2018/05/27/technology/router-fbi-reboot-malware.html

Here's a follow-up story:

https://www.nytimes.com/2018/06/13/technology/personaltech/wi-fi-router-security.html

And here's advice from the follow-up:

 

■ If you use a router provided by a broadband provider like Comcast or Verizon, call the customer service department and ask whether your equipment has been updated with the latest firmware.

I've not called Verizon; I'm waiting for them to come to us. Verizon, are you reading this posting? Please acknowledge the threat and inform us fully of how you're dealing with it and tell us what steps we little guys need to do to stay safe on the Internet.

Ramsey NJ

jonjones1
Legend

Personally no I am not too concerned.

spreading gloom and doom helps no one.

if the Verizon routers need updates don’t you think Verizon would have pushed out an update? What purpose would it serve to leave the routers vulnerable when it would cause more harm to their bottom line. Customers equal MONEY and Verizon does not like to lose money.

until Verizon states their are issues with their routers or network, these doom posts just make individuals are worried for no good reason.

more important things to worry about. Like world peace or healthcare or lowering the prices of prescription drugs. A router is not that a major concern.

0 Likes
Reply