VPNFilter Malware Prevention with Pepwave Surf SOHO Router

VPNFilter malware infection of consumer grade routers is worse than first reported according to this article at ArsTechnica. The list of vulnerable consumer routers includes many models made by Asus, D-Link, Huawei, Linksys, Mikrotik, Netgear, QNAP, TP-Link, Ubiquiti, Upvel and ZTE.

Consumer routers are designed for home use and firmware updates are infrequent if at all. If your router is on the list at ArsTechnica just rebooting or resetting your router may give you a false sense of security.

Consumer Routers Are Less Secure Than Business Class Routers

Consumer routers are designed to be easy to install and often combined with a broadband modem in one case provided by your internet service provider.

For your own security and privacy you should buy your own modem and separate router. Most ISPs allow you to buy your own modem from a list they provide. You should also change your DNS server settings to other than the default provided by your ISP for privacy: the OpenNic Project can give you a list of your closest servers. by Cloudflare is another good DNS service for privacy.

Consumer routers bought at retail stores are attractive and easy to set up but the manufacturing dollars mostly go into the case and not the firmware that runs the router. Insecure protocols like WEP, UPnP and NAT-PMP are often used by default. You should only be using the most secure router protocol which is WPA2.

Many home routers do not even let you change the name of your network (the SSID) or the log in username which is unacceptable.

You should always use a router which lets you control the network name and username and password used to access the router control panel. Many who use consumer routers are not even aware that their router or combination router/modem may have already been compromised by VPNFilter malware.

You Should Be Using A Business Class Router

Business class routers are designed with different priorities than consumer routers. Security is taken more seriously and firmware updates are more frequent. You will be paying more but the extra cost is worth it for your peace of mind. You will get more frequent firmware updates than any consumer router. If you want to learn more about router security visit routersecurity.org.

Pepwave Surf SOHO Router

I recommend a router made by Peplink called the Pepwave Surf SOHO. This router was already immune to the VPNFilter malware that can steal your credentials and passwords.


At $199 this router is the least expensive business class router you will find and is highly regarded in the router community. You may not have heard of it because they do not advertise much. Instead they just manufacture a very configurable business class router and provide free firmware upgrades often.

Customer support is provided at no charge once you register your router through a support ticket system. I personally use this router and highly recommend you consider replacing your insecure consumer router with a Pepwave Surf SOHO.