Phish hack on home routers

If you haven't changed the passwords on your home router, get fiddling. According to Symantec, hackers could use a piece of Javascript to change the settings and send you to fake websites.

Here's the CNet story:

The researchers found that it is possible to change the DNS, or Domain Name System, settings of a router if the owner uses a connected PC to view a Web page with the JavaScript code. This DNS change lets the attacker divert all the Net traffic going through the router. For example, if the victim types in "www.mybank.com," the request could be sent to a similar-looking fake page created to steal sensitive data.

So essentially it turns your router into a phisher's dream - and the researcher in question says the hack has already been tried and tested on Linksys, D-Link and Netgear routers. Change those passwords, people!