Snappy newsletters. Simple Facebook sharing. Spirited comments. Sweet features are waiting… GET THEM NOW!

Flash Attack Could Turn Routers Into Zombies

Experts say online criminals could exploit UPnP to hijack routers

By Rob Quinn,  Newser Staff

Posted Jan 16, 2008 1:11 PM CST

(Newser) – Security experts have demonstrated how attackers could use Flash software and the Universal Plug and Play (UPnP) protocol to hijack their home routers, reports PC World. Users exposed to a malicious Flash file could have the servers they're trying to reach changed remotely and secretly, meaning a fraudster could redirect the user to phony bank or e-commerce websites even if they typed the right address into their browser.

If you're not a computer whiz, turning off UPnP on your router will make it difficult to use applications like instant messaging and Skype, but the experts said the extra security could be worth it if it can prevent routers being turned into "zombies." One expert disagreed, however, pointing out that criminals haven't even started using this kind of attack.

Researchers say 99% of home routers are vulnerable to attackers using Flash and UPnP to hijack their routers. They recommend disabling UPnP, although this could make it difficult for non-technical users to use many applications.
Researchers say 99% of home routers are vulnerable to attackers using Flash and UPnP to hijack their routers. They recommend disabling UPnP, although this could make it difficult for non-technical users...   (KRT Photos)
The potential for the use of features in Flash and UPnP has some security experts worried. If a DNS server is hijacked using Flash and UPnP, users could be redirected to phony websites by criminals even if they manually type the correct address into their browser window. (AP Photo/Paul Sakuma)
The potential for the use of features in Flash and UPnP has some security experts worried. If a DNS server is hijacked using Flash and UPnP, users could be redirected to phony websites by criminals even...   (Associated Press)
Two computer security experts are warning that criminals could use elements of Flash software and the UPnP protocol to hijack routers, turning them into 'zombies' redirecting users to fake websites. (PRNewsFoto/D-Link)
Two computer security experts are warning that criminals could use elements of Flash software and the UPnP protocol to hijack routers, turning them into 'zombies' redirecting users to fake websites. (PRNewsFoto/D-Link)   (Associated Press)
« Prev« Prev | Next »Next » Slideshow
To report an error on this story, notify our editors.
A snapshot of the day's best news stories.
 
COMMENTS
Be the first to comment on this story.

More Newser Stories

Cybercriminals Create 57K Fake Websites a Week

Apple Loosens Up on Apps

Identify Theft Cases Spike, but Hackers Aren't to Blame

Adobe Strikes Back In Flash Scuffle

Take That, Steve: Adobe Giving Workers Androids


NEWS FROM OUR PARTNERS
Other Sites We Like:   24/7 Wall St.   |   Betty Confidential   |   BuzzFeed   |   Cracked   |   Fark   |   Timelines   |   The Frisky   |   Geek Sugar   |   NewsOne