Latest in Gear

Image credit: Virgin Media

Virgin Media: Change your Super Hub 2 password or risk being hacked

Over 800,000 customers are at risk, the company says.
Matt Brian, @m4tt
06.23.17 in Internet
524 Shares
Share
Tweet
Share
Save

Sponsored Links

Virgin Media

Typically, internet routers are designed to protect you and your devices from malicious third parties. But when many come with a default username and password, they can leave owners open to attack. That's the message consumer website Which? is pushing today, after it found that Virgin Media's Super Hub 2 routers can be hacked if users don't change the original credentials (normally printed on the back). Virgin Media says the risk is "small" but is urging over 800,000 customers to change the details to protect themselves.

The investigation focused on the security of various popular smart home gadgets. Which? created its own smart home and asked ethical security company SureCloud to go to town. As well as targeting the gadgets, researchers used freely available tools to probe the router and obtained its original password within a couple of days. As the Super Hub 2's administrator pages also ship with a common username and password, SureCloud was able to obtain complete access to the target network.

Virgin Media says that the issue isn't unique to the company's routers and affects other hubs that are around the same age. A Virgin Media spokesperson said: "The security of our network and of our customers is of paramount importance to us. We continually upgrade our systems and equipment to ensure that we meet all current industry standards.

"To the extent that technology allows this to be done, we regularly support our customers through advice, firmware and software updates, and offer them the chance to upgrade to a Hub 3.0 which contains additional security provisions."

Currently, there are around 864,000 Super Hub 2 routers in UK homes, although that number is falling as Virgin Media upgrades customers to the Super Hub 3. The newer router utilises 12 character passwords, which are a mix of cases and numbers.

The default Hub 2 offers 8 characters from a standard lowercase A-Z alphabet. Where it took a couple of days to crack the Super Hub 2 password, Which? says doing the same on the current model would take over 250 million years.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
524 Shares
Share
Tweet
Share
Save

Popular on Engadget

Google is reportedly gathering health data on millions of Americans

Google is reportedly gathering health data on millions of Americans

View
Amazon lets you connect Fire TV and Echo devices to create a home theater

Amazon lets you connect Fire TV and Echo devices to create a home theater

View
Apple removes Instagram stalking app Like Patrol from the App Store

Apple removes Instagram stalking app Like Patrol from the App Store

View
Chrome web apps will soon tout desktop-like speed

Chrome web apps will soon tout desktop-like speed

View
WeWork may have found its new CEO: T-Mobile's John Legere

WeWork may have found its new CEO: T-Mobile's John Legere

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr