Home wireless networks wide open

Research by the Indiana University School of Informatics (IUSI) has uncovered a security threat that could affect half of all home servers.

The attack uses a JavaScript application to change the domain name system settings on an unsecured router, or one that uses the default password.

This could allow a hacker to redirect the user to a phishing site whenever they try and log-on to their online banking sites, for instance.

Professor Markus Jakobsson of the IUSI, explained that the attack highlights the importance of the human factor in security.

"While drive-by pharming arises due to inadequate protective measures, there is also another human component: if an attacker can trick you into visiting his page, he can probe your machine," he said.

"Deceit is not new to humankind, but it is fairly recently that security researchers started taking it seriously."

The IUSI estimates that around 50 per cent of home routers are vulnerable to the attack because of poor password protection.

It recommends the use of a multi-layer password that includes upper and lower case letters, numbers and symbols to make cracking difficult.

"This new research exposes a problem affecting millions of broadband users worldwide," said Oliver Friedrichs, director of Symantec Security Response.

"Because of the ease with which drive-by pharming attacks can be launched, it is vital that consumers adequately protect their broadband routers and wireless access points today."

The attack is even more worrying since it requires no physical access to the router. A hacker could simply drive through a neighbourhood and launch the attack remotely.

See also:

Privileged passwords create hacking threat

Non-personal passwords offer easy way in to enterprise networks  05 Oct 2006

Paris Hilton calling card account cancelled

Not thought to be related to a number of celebrity voicemail hacks, including Lindsay Lohan's  01 Sep 2006

UK university offers first hacking degree

Abertay to launch BSc (Hons) in Ethical Hacking & Countermeasures  21 Jun 2006

Wireless networks still wide open to attack

Report finds 49 per cent of wireless networks in London operating without encryption  25 May 2006

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!