Internet Security

Router Worm Alert

PCMag.com blogs and PC World Magazine list a possible botnet infection, that affects both modems and routers, known as "Bluepill" and "PSYB0LT".  This is a password-cracking program with 6,000 common usernames and 13,000 passwords that it uses to try to access home networks.  At this point, Insight does not have a list of affected cable modems or routers.

While it has been reported that this worm / Trojan is barely active, it highlights the risks for Internet users who are using a default username or password on their router or have a username or password that are easy to crack.

It may not be obvious that your cable modem or router is affected.  The primary indicator would be reports of violations of our Acceptible Use Policy, which may be e-mailed to our Insight Abuse Desk at abuse@insightbb.com.  If you believe your cable modem and/or router may be infected, please consider the following recommendations:

PC World Recommendation:

Make sure you are not using the default username and password that came with your equipment.  Consult the materials that came with your equipment or the manufacturer's Website for instructions on how to change your username and password.  If you are concerned that your equipment may already be infected, a simple factory reset of your equipment will kill the worm.

Insight Recommendation:

If you are using a router, it is necessary to determine what sort of password is on the router, then reconfigure the username and password.  A factory reset of the router may also be performed followed by the placing of a strong password on the router.

Additional resources:

PC World Magazine

PCMag.com Blog

Netcomm NB5 ADSL Modem Advisory

Go Back