ZuoRAT malware in SOHO devices

Diobiennie61

Greetings everyone!

I just found out about a new stealthy malware that affect home routers devices. It's called ZuoRAT and more information can be found here.

I'm currently using an Internet Box 2, with the latest firmware as of this writing (version 13.00.38), and my question is:

Am I affected by this malware? is Swisscom aware of this? is there a new firmware in the works to fight against this?

Should I create a hardware base Firewall using either my Rpi3 or a computer to protect me against that malware?

At home we use both Windows and Linux, and I keep them all updated... but updates can just get me so far.

Any information regarding the ongoing of this malware would be much appreciated.

Cheers and best regards!

Black Mamba

@Diobiennie61

thanks for the information

it is recommended to set the Firewall to Strict

Router management (Internet-Box 2): Network > Settings > Strict > Save

If the "strict" firewall level is activated, IPv6 data traffic is only permitted in outgoing direction. The exceptions are a group of standard protocols. IPv4 data traffic can only be initiated from the home network to the Internet. Other basic data traffic controls are activated to protect against illegal and harmful data traffic

general advice from Swisscom

Security lock on your home network - Help | Swisscom

bitracer

Short answer is no. This malware is CPU architecture (MIPS) specific. The advice above is sound, put your firewall setting to "strict".