Advice Request Modem router security

[Parkinsond]

Can availabele anti-virus software detect malware infecting modem router firmware?

 

[Bot]

Typically, antivirus software is designed to protect your device's operating system, not router firmware. It's best to maintain your router's firmware updates for security.

 

[Zero Knowledge]

Typically the answer is NO. You need to use a network scanner like Nessus or something similar (NDR???) to find vulnerable routers. Shodan is great for finding vulnerable routers on the internet. Otherwise your SOL, most routers have in built AV/EDR/NDR now but whether they can pick up infected hardware is not clear.

 

[jetman]

Would switching the router on/off occasionally help to mitigate against some malware?

I suspect the biggest threat comes from unpatched vulnerabilities in the router firmware, rather than malware. If the router isn’t supported any more then there may be a case for buying a new one or installing third-party firmware.

 

[Parkinsond]

Would switching the router on/off occasionally help to mitigate against some malware?

I suspect the biggest threat comes from unpatched vulnerabilities in the router firmware, rather than malware. If the router isn’t supported any more then there may be a case for buying a new one or installing third-party firmware.

Thought of manaually updating its firmware; it is available on the manufacturer's website.
Unfortunately, those who tried to replace the modified firmware by ISP failed to log in the settings page again after the upgrade.

 

[Zero Knowledge]

Would switching the router on/off occasionally help to mitigate against some malware?

I suspect the biggest threat comes from unpatched vulnerabilities in the router firmware, rather than malware. If the router isn’t supported any more then there may be a case for buying a new one or installing third-party firmware.

It wouldn't hurt power cycling the modem on and off. It will get rid of some malware but not all depending on how the router is exploitable and what exploits are out there.

Your right though in your second point, the problem is if the router has know exploits or vulnerabilities it will just get reinfected on reboot.

Personally I think hardware is current hot attack vector for malicious actors. ISP routers have the advantage of being supported so exploits are patched and routers updated. It doesn't mean you won't get infected but even enterprise gear is rubbish and needs constant updates. The best consumer/home routers are ASUS and Netgear imho, then you have Ubiquiti/Mikrotik which are sort of half consumer and half enterprise gear but are liked by network geeks around the world and then you have enterprise gear like Cisco/Palo/SonicWall/Fortinet/Barracuda/WatchGuard/Juniper which are useless on home networks and have just as many bugs as consumer routers.

 

[jetman]

Another appraoch is use a security device (eg a firewalla box) to act as your router. Your existing router could then be configured to act only as a wireless access point. Then it wouldn't matter so much if your router firmware was out of date.
I think this approach has the potential to make a home network very secure.

Firewalla: Cybersecurity Firewall For Professional & Business Network

Firewalla is a professional-grade cybersecurity and networking platform for professionals, SOHO, and small businesses. It combines firewall protection, VPN, ad blocking, parental controls, VLANs, multi-WAN, and zero trust security with powerful mobile and web tools for visibility and control...

firewalla.com