4 min read · Beginner · Related: IT Security & Cybersecurity
Updated October 2026 · Tampa Bay–tested steps
Is Your Router Hacked? Signs and Cleanup
Redirected searches, unknown devices, DNS changed — how router malware works and the factory-reset cure.
1. Confirm the symptoms point at the router
Same redirects on every device (phone, PC, tablet) = network-level, likely router DNS hijack. One device only = that device. This distinction decides whether you reset the router or clean the PC.
2. Check DNS and admin credentials
Log into the router → verify DNS servers are your ISP's or known-good (8.8.8.8/1.1.1.1), not mystery IPs. If you can't log in with your password, assume the admin account is owned too.
3. Factory reset and rebuild securely
Hold reset 30 seconds, update firmware FIRST on the clean slate, set a new admin password, WPA3/WPA2-AES Wi-Fi password, and disable remote management. Rebuild from defaults — restoring a backup may restore the malware.
Is Your Router Hacked? Signs and Cleanup — When to Call a Pro
- Banking or business traffic crossed the compromised router — assume credential exposure.
- Reinfection after reset — firmware-level persistence needs replacement.
- Business network compromise — full audit, not just a reset.
Guide FAQ
Keep going on IT Security & Cybersecurity
Related service: IT Security & Cybersecurity →