About three months ago, my computer was infected and I lost access to several accounts. While researching what happened, I read that some malware can spread across a network or infect routers and other devices. I installed Kaspersky, but I still worry that another device might be compromised and could reinfect the router, even though I have not noticed any clear symptoms.
I also downloaded a ZIP file for a game modification on my phone, then factory-reset the phone. Since then, I have repeatedly logged into the router's administrator page from both my computer and phone to check for unfamiliar settings. I even replaced the router, but I am still worried that I may have created a security problem or that malware such as a router-targeting trojan could spread to the new equipment.
How realistic is this concern? Would reinstalling the computer and factory-resetting the phone be enough? Does replacing the router help, or could an infected device compromise it again?
3 Answers
A router from around 2019 or 2020 is not automatically unsafe, but it should have current firmware, a unique administrator password, and remote administration disabled unless you specifically need it. Since you already installed a new router, update its firmware, use WPA2 or WPA3, choose a new Wi-Fi password, and review the DNS and administrator settings once.
A factory reset removes normal phone apps and data, and it is usually sufficient for ordinary malware. Extremely sophisticated firmware-level infections are possible in theory but are not the likely explanation for a compromised account or a downloaded game-mod ZIP file.
The most useful next step is to stop repeatedly checking the router unless you have a specific symptom. Secure the accounts that were lost, scan or clean-install the computer, reset the phone, update every device, and use unique passwords with two-factor authentication. Random connection drops alone do not prove that malware infected the router; they can result from an ISP problem, failing equipment, or wireless interference. If the fear continues despite taking these reasonable steps, talking with a mental-health professional may help, because constant checking can keep the anxiety going.
This sounds much more like an information-stealing infection than malware designed to spread through router firmware. Router and network-wide infections do exist, but they are uncommon and usually depend on a specific vulnerable model, outdated firmware, or a targeted attack. Simply logging into the router’s administrator page does not create a hole in the network.
For peace of mind, perform a clean operating-system installation on the computer using installation media rather than relying only on an in-system reset. Factory-reset the phone, install all updates, and change important account passwords from a known-clean device. Enable two-factor authentication and sign out other sessions. Replacing every piece of network hardware is generally unnecessary.
The internet connection kept cutting out around the time my accounts were compromised, but that stopped after I changed routers and internet providers. I have not noticed anything unusual since then.
I do not know whether the old router had been updated regularly, but I replaced it with a newer one. I was worried that an infected device could immediately compromise the replacement.