I am staying in Thailand right now on a "long holiday" to do some work on my laptop.
A few weeks I noticed that at the condo where I am staying, sometimes I am redirected to ad sites. I researched it and learned there may be some problem with the wireless router's security (the model, TD-W8961ND, has a known vulnerability). I can find the router at 192.168.1.1 but no passwords work. I believe the attackers may have changed the password. Just yesterday, the attacks got severe and most websites would redirect to a fake site to "upgrade flash player" (malware file).
I tried to get the router replaced but when it came back from the ISP, it still has the same problem. So it looks like the router is still configured to redirect to malicious addresses.
My questions are:
1) What is the likelihood that financial information conducted over SSL could have been affected during this breach? Passwords? I normally don't fall for these traps but since I was using a compromised router for 2 months, it's possible they got me somehow.
2) I am now using a secure OpenVPN connection and no longer experiencing any problems from my router because my requests are all going to the VPN server first. If I stay connected via VPN, am I still vulnerable to problems exposed to me by this router? (Let's assume there's no way I can actually fix the problem).
3) Or, does anybody know if there's a way to force-reset the router back to admin/admin so I can log in and look at the security settings and patch the vulnerability?