VPN Filter malware: More routers affected by Russia-linked malware attack (Full List)

What was first thought back in May to be just a mere strain of malicious software that affected more than 500,000 routers, the VPNFilter malware appears to be more powerful than expected. Security firm Cisco Talos has released an updated list of routers affected by the VPNFilter malware.

Netgear router vulnerability — (Representational Image) Experts have found vulnerability in several routers from VPNFilter malware bypassing SSL encryption.Twitter/NETGEAR

VPNFilter, the strain of malware that prompted the FBI to warn all router owners late last month to reboot their devices, appears to be much worse than initially thought. A new report from Cisco Talos on Wednesday confirmed that the VPNFilter malware can bypass the SSL encryption between a server and a client, that on top of its ability to undermine the router up to the point of its unusability.

According to the security firm, the Russia-linked VPNFilter malware has been targeting more router devices and vendors than what was previously listed. New vendors on the target list include Asus, D-Link, Huawei, ZTE, Ubiquiti, and UPVEL. New devices from Linksys, Netgear, MikroTik, and TP-Link were also discovered affected.

"We have seen that VPNFilter is targeting more makes/models of devices than initially thought, and has additional capabilities, including the ability to deliver exploits to endpoints," states Cisco Talos.

What Does VPNFilter Malware Do?

The VPNFilter malware has a module that captures outgoing HTTP or SSL requests to convert them into non-secure requests. In this way, the people behind VPNFilter can peek through a person's login credentials and other sensitive data and copy them.

It was reported in May that about 500,000 routers were strained by the malware, prompting the FBI to recommend that impacted routers be reset to its factory state. Unfortunately, it just would not cut it.

Now, security experts have worked around the system, advising all owners of aforementioned router brands to upgrade the device firmware, and not just to factory-reset their devices. Users are recommended to visit the router makers' support pages for the step-by-step guide on how to update firmware and perform a factory reset.

List of Affected Routers

Cisco Talos has released the updated list of the models that are vulnerable to the VPNFilter malware, as follows:

Asus