A major new hack has emerged which involves malicious javascript on a website changing the DNS configuration of home routers. This will then allow phishing attacks to be undertaken without the user being aware.

The hack capitalizes on the fact that most people do not change their router's configuration login password from the default of 'admin'. To login to your router's configuration screen you typically need to enter the address http: //192.168.1.1 in a browser address bar, then use the username and/or password of admin.

I recommend you do this now, and check to see where you can change the password - change it to something safer than 'admin'. If you aren't sure how to do this check your router manufacturer's website.

Source: Hack lets intruders sneak into home routers

Good advice. Changing the default password upon purchase and installation seems like common sense, but a LOT of people don't realize they should do it. Most of the quick-start instructions on these routers do not explain to people that they should change their router admin password.

They should include a dummy proof wireless security briefing in each router manual that is purchased. Wireless networks are easily hacked into if someone is unfamiliar with the dangers. Changing the default password on routers, should be the first thing to do once everything is set up.