A new test conducted by Symantec and the University of Indiana shows that an attacker with a malicious JavaScript code can take over one’s computer if the user has not changed the default password on their router for internet connection.

The two things that must be in place in order for this to hapen is that first, the attacker must lure an internet user on his or her webpage which contains a malicious JavaScript code. Then, that user’s router password must be the same as the password that was provided by the manufacturer of the router.

These attacks can be malware, identity theft, and denial of service.

Source: Computerworld