Protect against "Roaming Mantis" Malware - Disable your router's remote administration feature and hardcode a trusted DNS server into the operating system network settings (NOT rocket science, plain common sense)

Roaming Mantis -  Steals sensitive information from Android and iOS devices and  Roaming Mantis injects a browser-based cryptocurrency mining script

Since the hacking campaign is using attacker-controlled DNS servers to spoof legitimate domains and redirect users to malicious download files, you are advised to make sure the sites you are visiting has HTTPS enabled.


To check if your Wi-Fi router is already compromised, review your DNS settings and check the DNS server address. If it does not match the one issued by your provider, change it back to the right one. Also change all your account passwords immediately.



https://thehackernews.com/2018/05/routers-dns-hijacking.html