malware

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. D

    News New Discord application malware

    https://www.fortinet.com/blog/threat-research/unraveling-cyber-threats-insights-from-code-analysis
  2. sashabe

    Malware connecting to various IPs upon SSH login to router

    I have been using an ASUSWRT-Merlin installed on RT-AC86U, 384.11-2 for a couple of years. SSH login is enabled from LAN only from a single computer (via auth key), but Web UI has been allowed for both HTTP and HTTPS. Some other customer features have been enabled (Smart Disk, Smart Access...
  3. krash867

    IOT Mystery - Help Needed

    I am a longtime Merlin user and have lurked the board for what seems like ages. I've never had to post before because like every tech savvy guru, I know that my problems are not unique. Someone... at least one person has had the same issue as I, and most likely there are multiple solutions...
  4. HELLO_wORLD

    Aegis aegis: a firewall blocklist

    aegis is the successor of firewall-blocklist: https://www.snbforums.com/threads/r7800-r9000-probably-others-blocklist-based-firewall-addon.63241/ It starts with version 1.0.0, but is more recent than latest firewall-blocklist aegis A firewall blocklist script for Netgear R7800 and R9000 Routers...
  5. S

    Has my RT-AC68U been hacked? Odd 2-Way IPS hits!

    Hi all. I had a look at my RT-AC68u router firmware this morning and noticed under the 2Way IPS protection page that I have had some Client Device Infected hits. Well this sent me into panic mode thinking my laptop had some malware, however the laptop has had a full scan with latest definitions...
  6. J

    How to remove all malware?

    As far as we know, the VPNFilter malware doesn't currently put ASUS routers at risk, but the FBI believes it was created by a Russian state-sponsored cyber espionage group, so we can assume attackers are gunning for all SOHO routers. Q1. How could you remove all malware from a router? I.e. how...
  7. redhat27

    Yet another malware block script using ipset (v4 and v6)

    As if we don't have enough already :p Here is yet another malware blocking script that uses ipset (v4 and v6). So why put up another one? Over 650 Million unique IPs blocked Simpler (minimalist script with only 26 lines (which includes a couple of blank lines and comment lines) Quicker...
  8. sfx2000

    Android joins the "Switcher" club with DNS changer malware

    Another one... good reason to double check the Admin setup on the router, ensuring one has a reasonably secure password - also a good tip is not to keep the admin page open/logged in - get in, check/change settings, and get out (and probably close the broswer tab/window)...
  9. K

    Malware Filter / bad host IPSET

    Hello, I am trying to block outbound connects to know bad host from my LAN/ Wireless. I am running the script located below and have the below firewall rules so it looks to be working. Any know what else to check? Running this script under the heading "Malware Filter"...
  10. sfx2000

    Ransomware on SmartTV's now - TrendMicro Report

    Another infection vector - Android based SmartTV's... http://blog.trendmicro.com/trendlabs-security-intelligence/flocker-ransomware-crosses-smart-tv/ This one can be tough to fix as many sets do not expose the ADB connection due to DRM risks...
  11. Adamm

    Skynet Skynet - Router Firewall & Security Enhancements

    For support requests and questions please use the Github Issue Tracker where this script is actively maintained Skynet - Router Firewall & Security Enhancements Elevate your home network security with Skynet, a robust firewall and security tool meticulously crafted for ASUS routers running...
Top