Oops! TP-Link forgets to Renew and Loses its Domains Used to Configure Router Settings

 Tuesday, July 05, 2016  Swati Khandelwal
Oops! TP-Link forgets to Renew and Loses its Domains Used to Configure Router Settings
To make the configuration of routers easier, hardware vendors instruct users to browse to a domain name rather than numeric IP addresses.

Networking equipment vendor TP-LINK uses either tplinklogin.net or tplinkextender.net for its routers configuration. Although users can also access their router administration panel through local IP address (i.e. 192.168.1.1).

The first domain offered by the company is used to configure TP-LINK routers and the second is used for TP-LINK Wi-Fi extenders.

Here's the Blunder:


TP-Link has reportedly "forgotten" to renew both domains that are used to configure its routers and access administrative panels of its devices.

Both domains have now been re-registered using an anonymous registration service by an unknown entity and are being offered for sale online at US$2.5 Million each.

This latest TP-Link oversight, which was first spotted by Cybermoon CEO Amitay Dan, could lead its users to potential problems.

However, it seems like TP-Link is not at all interested in buying back those domains, as Danclaims that the hardware vendor is updating its manuals to remove the domain name references altogether.

In recent years, the hardware vendor has started replacing its tplinklogin.net domain with tplinkwifi.net domain, which is currently under its control. So, there is no direct threat to TP-Link users.

But unfortunately, the tplinklogin.net and tplinkextender.net usually came printed on the back of the devices. So, users accessing this domain on devices could end up on a domain under a third-party's control.

If malicious actors get their hands on these domains, they could use them to distribute malware, serve phishing pages instructing users to "download new firmware to your router," and request device or social media credentials from users before redirecting them to the router's local admin panel IP.

The bottom line:


Users are advised to avoid accessing their TP-Link routers using the tplinklogin.net domain; instead, use local IP address.

Dan has also recommended Internet Service Providers (ISPs) to block the affected domain names in order to prevent its customers from being hijacked.

Comments

Post a Comment

Popular posts from this blog

100+ Awesome Web Development Tools and Resources

Image
100+ Awesome Web Development Tools and Resources Keshav technosys  |  UPDATED:  JULY 5, 2016 The best and worst thing about being a web developer is that the web is constantly changing. While this is exciting it also means that web developers must always be proactive about learning new techniques or programming languages, adapting to changes, and be willing and eager to accept new challenges. This could include tasks such as adapting existing frameworks to meet business requirements, testing a website to identify technical problems, or optimizing and scaling a site to better perform with the back-end infrastructure.  We thought we would compile a comprehensive list of  web development tools and resources  that can help you be more productive, stay informed, and become a better developer. Web Development Tools and Resources for 2016 A lot fo these web development tools below are ones we use at KeyCDN on a daily basis. We can’t include everything, but here are a couple of o
Read more
Image
FBI 'Double Agent' Pleads Guilty to Selling 'Classified Information' to China   Monday, August 01, 2016     An FBI electronics technician has pleaded guilty to acting as a Chinese secret agent and passing along sensitive information about the Feds to a Chinese government official. Kun Shan "Joey" Chun , 46, admitted in federal court in Manhattan on Monday that he violated his security clearance on several occasions between 2011 and 2016 in an effort to pass on secret information to China in exchange for money. Chun is a 19-year FBI veteran from Brooklyn who was born in China but was employed by the FBI in 1997. His duties with the FBI included " accessing sensitive and, in some instance, classified information ." The g-man, as a double agent, sent confidential government information – including the identity and travel plans of an FBI special agent, the internal structure of the FBI and spying technology used by the Bureau – to a Chi
Read more

facebook marketing ajmer,facebook marketing agency ajmer,facebook marketing companies in ajmer,Facebook marketing company ajmer,facebook marketing company in ajmer,Facebook marketing companies ajmer.

facebook marketing ajmer,facebook marketing agency ajmer,facebook marketing companies in ajmer,Facebook marketing company ajmer,facebook marketing company in ajmer,Facebook marketing companies ajmer. : facebook marketing ajmer,facebook marketing agency ajmer,facebook marketing companies in ajmer,Facebook marketing company ajmer,facebook marketing company in ajmer,Facebook marketing companies ajmer.
Read more