TalkTalk Penetration tester urges TalkTalk to replace routers due to malware attack
Pen Test Partners’ Ken Munro has called for TalkTalk to replace thousands of its routers following an alleged malware attack which he says led to the theft of users’ Wi-Fi passwords and other details. While the thefts were not confirmed by the company, a spokesperson did confirm that the Mirai worm was affecting many internet service providers around the globe, as well as several TalkTalk customers.

Talk Talk wifi Passwords Stolen

A security expert urged affected users, who maybe at risk of phishing attacks, to change their wi-fi password right away.

20:41 06 December 2016

Pen Test Partners' Ken Munro wants thousands of Talktalk routers to be replaced following a malware attack that caused customers’ wi-fi passwords to be stolen.

Mr Munro claims that other details had also been taken, which could put customers at risk of more targeted hacks.

However, a spokeswoman for the company said that TalkTalk had not seen evidence to confirm the thefts. "As is widely known, the Mirai worm is affecting many ISPs [internet service providers] around the world and it has affected a small number of TalkTalk customers,"

"We continue to take steps to review any potential impacts and have deployed a variety of solutions to ensure customers' routers remain safe.

"We have also employed additional network-level controls to further protect our customers."

The company also advised affected users to reset their routers and install an update designed to provide protection against the attack.

However, Mr Munro said that such action would not solve the problem.

"Most consumers never change the wi-fi keys written on the back of their router, so the fix didn't actually fix the problem,"

"Once an attacker has got the wi-fi key, if they go near to the house they can get nearly everything from their home network.

"TalkTalk should seriously consider replacing customer routers immediately unless it can prove they haven't been compromised."