. Upon discovering this , Y immediately called an IT technician to find the root cause . But since no malware was found in the devices connected to the network , he then reviewed the home router settings . What he found was interesting : even though the home router did not expose any remote management interface to the internet , the DNS settings were still modified . In another case , user X noticed R $ 3,000 ( US $ 955.11 , as of January 30 , 2017 ) was deducted from her account last January 2016 . Her home router was also infected with a malicious DNS-changing malware . Routers often have unsecure configurations that make them susceptible to malware attacks similar to the real-world cases we presented aboveVulnerability-related.DiscoverVulnerability. For one , security flaws exist inVulnerability-related.DiscoverVulnerabilitythe operating system , firmware , and web applications of routers . Attackers can simply use these vulnerabilities as entry points to further compromise the home network . Web-based scripts are an effective tactic to infiltrate routers .