jozsef316@gmail
D E F E N D
- Joined
- May 13, 2026
- Posts
- 5,653
- Reputation
- 4,321
Hi. Our home network and devices have recently been hacked.
It looks like our router was infected first, which led to our devices being compromised using MITM attack, keyloggers, changing settings, passwords and stealing personal data. This all happened over a period of time, so it took a while to figure out what was going on.
How can I prevent this from happening again - or at least miminise the risk?
- Router: What settings are recommended to prevent rogue access? What should be locked down in terms of protocols, ports and admin? I'd like to aprove each device added. Should I whitelist MAC addresses, or bind MAC to IP and whitelist that, or something else?
- Mobile phones (Android) and PC/Mac: What should one do here to prevent any issues in the future? Anything that can notify one early on of interference, manipulated traffic or someone snooping?
- I have been using AdGuard on our mobiles and PC/Mac. However, I'm a bit worried that installing its Security Certificate to block trackers and ads in HTTPS traffic could have weakened the security of our devices and contributed to the MITM attack. Is it safe to leave its Personal CA, or should I remove it and just stick with HTTP filtering? Thoughts?
- Anything else one should think about? Adding 2FA where possible. Authy seems good.
Many thanks, I look forward to your suggestions.
It looks like our router was infected first, which led to our devices being compromised using MITM attack, keyloggers, changing settings, passwords and stealing personal data. This all happened over a period of time, so it took a while to figure out what was going on.
How can I prevent this from happening again - or at least miminise the risk?
- Router: What settings are recommended to prevent rogue access? What should be locked down in terms of protocols, ports and admin? I'd like to aprove each device added. Should I whitelist MAC addresses, or bind MAC to IP and whitelist that, or something else?
- Mobile phones (Android) and PC/Mac: What should one do here to prevent any issues in the future? Anything that can notify one early on of interference, manipulated traffic or someone snooping?
- I have been using AdGuard on our mobiles and PC/Mac. However, I'm a bit worried that installing its Security Certificate to block trackers and ads in HTTPS traffic could have weakened the security of our devices and contributed to the MITM attack. Is it safe to leave its Personal CA, or should I remove it and just stick with HTTP filtering? Thoughts?
- Anything else one should think about? Adding 2FA where possible. Authy seems good.
Many thanks, I look forward to your suggestions.
WTF
WTF
WTF
