My SuperHub has been hacked?

[liveseytowers]

I've been having real speed issues with my Virgin at home recently, so I checked the Router and I had two unknown Android devices connected for the last 28 days!! My SIDD was broadcast but I had a password set with WPA2. How can my password be cracked? I knew WEP could be done in seconds but really surprised/worried that my neighbours have been on my network and wondering what the fuck have they been downloading? Someone was rinsing it tonight and downloaded nearly 60GIG in an hour! All my machines were off apart from my Laptop and it wasn't that as the NIC was showing no activity.

I've changed the SIDD, hidden it and also set up MAC filtering and changed the password which should stop it happening again but a bit of a faff changing all my devices.

[stimpy]

Superhubs are prone to WPS PIN hacking using Reaver, I suggest you disable WPS.

[liveseytowers]

Superhubs are prone to WPS PIN hacking using Reaver, I suggest you disable WPS.

It does have a WPS Pin set which is the default. I've never heard of this before, what does it do?

EDIT just had a read and found this article. Amazed how easy it is.

http://community.virginmedia.com/t5/...EN/td-p/954273

[Undertaker]

disable WPS - as that is what most likely exploited... however I did read that on some routers you can't actually disable WPS, even though you have checked the option.
Personally I would get a router that doesn't have WPS, or one that can actually be switched off

WPA2 can also be cracked if it has a weak password. Can be brute forced, choose a long password with numbers letters etc
Add mac filtering - but to be honest if someone can exploit WPS then they most likely can do mac spoofing

also keep a note of the mac addresses, if they haven't been spoofed you can run backtrack and try to locate the cunts...
keep the logs though, if they have been downloading illegal shit then they will come in handy


for the more extreme - migrate over to wpa2-enterprise

[CzarJunkie]

Hiding the SSID and mac address filtering won't help, both are useless. As suggested above, switch off WPS as that is prone to attack. Also change your WPA2 key and make it a fucking long one.

[liveseytowers]

Is it worthwhile getting a new SuperHub now that this one has been hacked? Ideally I should get a new router, which ones are recommend?

I've disabled WPS, Changed the SIDD, Changed the WPA2 password so its 12 lowercase and uppercase characters and numbers, enabled MAC filtering as well. Hopefully this should keep me safe for now.

[Undertaker]

change your router login password for added security,

i would just monitor the logs every now and then but if you are really worried about your security I would just disable the router part ofthe hub thus only using it as a modem and stick another router on top.

[Thalamus]

Turn off wi-fi and just use homeplugs...only way to be sure

[eblaster101]

you could switch the router to modem only and plug in your own router. Not got any experience with virgin super hubs but im betting they are pants.

[liveseytowers]

you could switch the router to modem only and plug in your own router. Not got any experience with virgin super hubs but im betting they are pants.

I could do that but I'm reluctant to have the SuperHub behind my TV as a modem and then another Router as well. Wouldn't be so bad if it was the old stylee smaller modem. All seems OK now that i've disabled WPS and enabled MAC filtering. There are loads more Superhubs that I can see from my house so i'm sure whoever did it will be getting free internet from someone else

[nelly13]

I could do that but I'm reluctant to have the SuperHub behind my TV as a modem and then another Router as well. Wouldn't be so bad if it was the old stylee smaller modem. All seems OK now that i've disabled WPS and enabled MAC filtering. There are loads more Superhubs that I can see from my house so i'm sure whoever did it will be getting free internet from someone else

Did you have to re-add all your devices after disabling wps or was stuff stull connected

Regards

[liveseytowers]

I had never used WPS and because I changed the SID, hid the SID, changed the password and enabled MAC filtering I had to manually re-add them.

[nelly13]

Cheers

gonna have a look at mine later. think all mine have been added using the key on the back of the router

although dont think anyone round me is too pc savvy!!!

regards

[doughboy]

As said above, vm hubs are shite.. I have one - as do many of my neighbours. They are all able to be compromised. $KY & BT neighbours haven't been

[liveseytowers]

Cheers
although dont think anyone round me is too pc savvy!!!

You should see my neighbours! 80+ on one side and a builder on the other side who doesn't have a clue and i'm amazed the people over the road can get a signal as I can't get a signal in my kitchen due to the SH being installed BEHIND the TV.

[stimpy]

I got Infinity installed yesterday. Been using the Superhub for about 18 months and have only just noticed how crap the wifi range is by comparison. It always used to drop upstairs and in the back garden. With the home hub it's 2 or 3 bars everywhere on my phone.

My advice is to go and get a decent router and stick the superhub in modem only mode.

[Copex]

Changed the WPA2 password so its 12 lowercase and uppercase characters and numbers

try to use wpa2 aes and not tkip, ensure you have no dictoinary words or g33k sp33k in your password, ATM 22 digits is the fall off point, where it gets to the point where it would take to long to hack the password.

[swiggy]

WPA2, Mac Filtering, and having a hidden SSID are still not secure enough if someone wants to gain access to your router through wifi, unfortunately the only true way to secure your network is as someone already suggested, don't use wifi. If this isn't possible try setting up some form of honey trap to see if you can gain some info on who's accessing you stuff, and turn off wifi if its not in use. WPA2 is exploitable no matter how long the password is; the amount of traffic you send out can make it just as easy to crack WPA2 as it is to crack WEP through things like wireshark or Kismet. There are also handshake attacks which can be used, or for people who have mac filtering, a similar kind of attack as those used on ARP tables can be formed.

[Copex]

if the attack method used to crack is to Brute-force using Rainbow Table the using WPA2/AES (with wps/wds disabled) with a minimum 22 random digit pass phrase containing no dictionary words using a mixture of numbers letters & special car actors then the amount of time it world take to crack the pass phrase becomes undesirable, (tested using a core i7 with 4 SLI gpu's) ok 22 should be 25, TKIP is exploitable and there is current debate about mschapv2

if there is any ways to truly crack wpa2/aes like wpa not using a brute force attack then please point me @ a link :-) as i am not as update as i use to be.

i can set up a secure wireless network using Unix and a open wireless network :-) you just have to think outside the box. ( i can not discuss the method is used as it is still deemed to be secure)