How to prevent being hacked again - Router & devices? 😢

[ColinTaylor]

@MadonnaMustache To be clear, the previous post is not applicable to you as you are not using an Asus router. Also, anecdotal stories from decades ago are not relevant nowadays.

 

[L&LD]

Yes, not using an Asus router (or more specifically, any non-ISP router) is the issue, if the router is what was initially attacked. I also consider the ISP as much of an intruder as anything else on the 'net, BTW.

And of course. Ignore history at your own risk. Learn and adapt from past experiences. This is the way.

 

[Tech9]

The more information I find about this Zyxel router the less likely it seems to me it was hacked. It is often ISP supplied gateway with locked down firmware to basics only. The Zyxel user manual doesn't even apply. Folks say resetting it just brings the service back up as nothing much happened. Made user friendly as possible, zero user configuration needed. In the UK it's offered by Three and EE, for example. If this is your case @MadonnaMustache and you still believe you ware hacked - focus on a client device like PC. Malicious software download by accident, etc. Your phones/tablets are most likely fine as well. For IoTs - search online, there will be noise if something bad happens.

 

[Justinh]

Is there anything I can do to prevent rogue IoT devices?

If your equipment has the capability, you can put IoTs on a separate, isolated SSID (i.e., guest network), but they'd still have access to the router, of course.

 

[LeilaBD]

The UK's National Cyber Security Centre has some good advice on using smart devices safely in the home: https://www.ncsc.gov.uk/guidance/smart-devices-in-the-home

In addition, the UK's new product security regulations came into force on 29th April 2024 and it might be hoped that the benefits from these will also apply in other countries.
The requirements include:

• A ban on the use of 'universal default and easily guessable default passwords' on consumer connectable products.
• All manufacturers of smart products will need a published contact to report vulnerabilities found in their devices.
• Manufacturers must publish information on the defined minimum guaranteed period (with an end date) in which they will provide security updates to their products.

The consumer magazine Which? has produced a comprehensive guide that describes what this law means for consumers.