How to protect your router from Russian hackers

File photo. (REUTERS/Kacper Pempel)

A few weeks ago, the United States Computer Emergency Readiness Team (US-CERT) issued an alert about state-supported Russian hackers carrying out attacks against a large number of home routers in the U.S. These hackers are organized, motivated, and well-funded.

They’re not a bunch of misanthropic nerds sitting in basements. They’re getting paid to steal your digital credentials. These Russian hackers are reportedly using known weaknesses to infiltrate residential routers and utilize them to get a foothold on a network.

This is a big deal, so pay attention. When your router is compromised, a hacker can inflict damage, not just on the router itself, but on every connected device running on your network.

Let that sink in for a moment. Any device that is using your home internet is vulnerable.

While the alert is new, the hackers actually been doing this for some time. They might be stealing from you right now. Click here for a free check to see if your router has already been compromised by hackers.

Once your router is hacked, it lets criminals execute these further attacks:

* identify other vulnerable devices in the network

* read your gadget configurations

* map your internal network

* harvest usernames and passwords

* impersonate administrators

* modify firmware

* modify operating systems

* change configurations

* spy on your traffic and redirect it through Russian-controlled servers

Here are some ways to keep them at bay.

More on this...

Update the router’s firmware

Your router’s firmware is designed to keep your network safe. If you don’t update the firmware, hackers can easily find flaws to exploit.

Updating firmware isn’t as hard as it sounds. You can find your router’s admin page usually using a browser; each setup is a little different, depending on your operating system and router model. Once you’re in the router’s admin page, find the section called “Advanced” or “Management” to look for firmware updates. Just download and apply. Check for router firmware updates at least once every three months.

You will need your router’s password. If you don’t know your router’s admin password, no worries. Click here for a site that lists the default passwords for 548 different router brands.

This is why it’s vital to change the default router password. Every hacker worth his salt has access to all the default passwords of every router brand, so you need to create one of your own that's strong.

Turn off remote administration

“Remote administration” is the ability to use your computer from another location. You could log onto some other computer (down the block, or in another country) and use the internet to log onto your computer back home. This tool can be downright magical, especially if you’ve called tech support and you need a technician to fix something from the Philippines.

But if hackers break in, they can also manipulate your computer in real time.

Related: Wi-Fi giving you a headache? Click here for 10 ways to fix common Wi-Fi problems.

While you're in your router's administrator page, turn off remote administration for better security. You can find this under your router settings, usually under the “Remote Administration” heading.

While you're at it, you can turn off older internet management protocols like Telnet, TFTP, SNMP, and SMI.

Check your DNS settings

IBM Security, Packet Clearing House, and The Global Cyber Alliance have a free service to give you better security and privacy while accessing the internet.

It's called the Quad9 Domain Name System (DNS) service, and it is designed to protect internet users from accessing sketchy websites that are known for spreading malware, stealing personal information and fraudulent activity.

Each time you click on a web link, Quad9 will check the site against IBM-X-Force's threat intelligence database of over 40 billion analyzed webpages and images.

When set as the DNS server on the router or gateway level, Quad9 can protect smart appliances and internet-connected devices from cyberattacks by blocking known remote hosts that are responsible for botnets and malware infections.

Click here to learn more about this free, essential security tool. It takes just a few minutes to get protected.

Turn on your guest network

In theory, a “guest network” is designed for people visiting your house or office. This separate network keeps your devices separate from theirs, especially if you’re in the habit of file-sharing.

You can do this by setting up a completely different Wi-Fi router or by simply enabling your router's "Guest Network" option, a popular feature for most routers. This segregation will also work to protect your smart gadgets including cameras, lights, and appliances.

It’s not hard to set up and use a guest network. If you need a hand, click here for the step-by-step instructions.

What questions do you have about living the best digital life? Call my national radio show and click here to find it on your local radio station. You can listen to the Kim Komando Show on your phone, tablet or computer. From buying advice to digital life issues, click here for my free podcasts.

Learn about all the latest technology on the Kim Komando Show, the nation's largest weekend radio talk show. Kim takes calls and dispenses advice on today's digital lifestyle, from smartphones and tablets to online privacy and data hacks. For her daily tips, free newsletters and more, visit her website at Komando.com.