Bugs & Fixes: The Moon Worm slinks by Linksys E-series routers

There's no real fix for this malware yet, but you can thwart it by keeping a specific setting disabled.

A slimy piece of malware called the moon worm has managed to slither past the login for Linksys E-series routers. SANS ISC said that it's the CGI script for the administration interface that's vulnerable, and recommends that you upgrade your firmware--when an upgrade that fixes the problem is made available. As of now, you're invited to switch off your E-series router's Remote Management Console to avoid possible hacking. If you never turned it on, you're in luck, it's disabled by default.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
CSO WANTED
Have an opinion on security? Want to have your articles published on CSO? Please contact CSO Content Manager for our guidelines.

Tags malwarewirelessNetworkingWi-Firoutersnetworking hardwareWLANs / Wi-Fi

More about CGILinksys

Show Comments

Featured Whitepapers

Editor's Recommendations

Solution Centres

Stories by Jon L. Jacobi

Latest Videos

More videos

Blog Posts

Market Place