Can Malware Spread Through Wi-Fi? Shared Network Risks

Malware does not jump through Wi-Fi just because two devices use the same router. A shared Wi-Fi connection becomes risky when one device exposes file sharing, runs an unpatched network service, trusts a fake hotspot, or uses a router with weak admin settings. In those cases, malware can use the local network as a path to reach other devices, steal traffic, change DNS, or trick someone into opening a malicious file.

The useful question is not “can Wi-Fi itself carry a virus?” Wi-Fi carries network traffic. The real risk is what that traffic can reach: shared folders, old services, router settings, IoT devices, and login pages on public hotspots.

What shared Wi-Fi can and cannot do

Wi-Fi alone does not infect a clean phone or PC automatically.
Malware can spread over a local network through shared folders, weak passwords, exposed services, and vulnerable devices.
A compromised router can redirect DNS, expose devices, or join a botnet.
Public Wi-Fi mainly adds fake hotspot, phishing, and traffic-interception risk.
If one device is infected, isolate it first, then check the router and other devices.

How Malware Actually Spreads on Shared Wi-Fi

Situation	Risk and what to do
Windows file or printer sharing is open	Malware can copy files to shared folders or abuse weak permissions. Turn off sharing when you do not need it, keep password-protected sharing on, and avoid trusting public networks.
A device is unpatched	Worm-like malware can exploit old network services. Update Windows, macOS, phones, NAS devices, cameras, and smart-home firmware.
The router uses a weak admin password	An attacker or malware may change DNS, port forwarding, or remote management. Change the router admin password and update firmware.
IoT devices share the main network	A vulnerable camera, TV box, DVR, or smart device can become a foothold. Put guest and IoT devices on a separate guest network where possible.
Public Wi-Fi asks for logins or downloads	Fake hotspots and captive portals can phish credentials or push malicious apps. Use HTTPS, avoid unknown downloads, and do sensitive logins on trusted networks.
One infected PC contacts other devices	The infected system may scan the local network, look for shares, or try weak credentials. Disconnect it from Wi-Fi before cleanup.

First Checks If One Device Was Infected

Disconnect the suspicious device. Turn off Wi-Fi or unplug Ethernet before it can scan or reach shared folders.
Do not reconnect it just to “test.” Clean it first, then reconnect after a full scan and restart.
Check shared folders. Look for unknown executables, scripts, archives, or shortcuts in folders that other devices can access.
Log in to the router from a clean device. Review DNS servers, admin password, firmware version, port forwarding, and connected devices.
Change Wi-Fi and router admin passwords. Do this from a clean device if the infected PC had browser-saved router credentials.
Scan computers that used the same shares. For a single suspicious file, you can also check it with the Gridinsoft Online Virus Scanner.

Home Wi-Fi vs Public Wi-Fi

Home Wi-Fi risk mostly depends on trust and configuration: who can join, whether devices can see each other, whether sharing is open, and whether the router is patched. Public Wi-Fi is different because you do not control the access point. The FTC notes that HTTPS encryption makes public Wi-Fi much safer than it used to be, but fake sites, fake hotspots, weak account security, and malicious downloads are still real risks.[2]

If you connect to hotel, airport, school, or cafe Wi-Fi, set Windows to a public network profile unless you truly need local sharing. Microsoft describes public networks as the recommended profile for most connections because the PC is hidden from other devices on that network.[3]

Signs the Router May Be Part of the Problem

DNS servers changed to addresses you do not recognize.
Port forwarding or remote administration is enabled unexpectedly.
Unknown devices keep appearing after you change the Wi-Fi password.
All devices see redirects, certificate warnings, or unusual search pages.
The router runs old firmware or is end-of-life and no longer receives updates.
The public IP is flagged for proxy, spam, scanning, or botnet behavior.

Router compromise is less common than a normal infected PC, but it matters because every device depends on the router. CISA recommends securing wireless networks with strong authentication, firewall protection, software and firmware updates, and separate guest access where available.[1]

Windows Settings That Reduce Wi-Fi Spread Risk

Use Public profile on untrusted Wi-Fi. This hides the PC from other devices and disables normal sharing behavior.
Keep Microsoft Defender Firewall on. Firewall rules help block unexpected inbound connections on public and private networks.
Turn off network discovery when you do not need it. Discovery makes the PC easier to find on the local network.
Review file and printer sharing. If sharing must stay on, use strong Windows passwords and share only the folders needed.
Patch old Windows systems quickly. Old network services are the usual path for worm-like spread.

How to Protect a Shared Wi-Fi Network

Use WPA2 or WPA3 with a long, unique Wi-Fi password.
Change the router admin password from the default.
Update router firmware and replace routers that no longer receive updates.
Disable WPS and remote administration unless you intentionally use them.
Use a guest network for visitors and smart devices.
Keep file sharing off on public or mixed-trust networks.
Keep computers, phones, browsers, and IoT firmware updated.
Scan devices after suspicious downloads, cracks, fake updates, or unknown pop-ups.

Scan before reconnecting an infected device.

If one computer was infected, clean it before putting it back on the shared network. A full scan can catch hidden startup entries, dropped files, and bundled threats.

Download Anti-Malware

What to Do If a Device Was Already Infected

Disconnect the device from Wi-Fi and Ethernet.
Remove the original installer, archive, attachment, or extension that triggered the infection.
Run a full scan and restart before reconnecting.
Change router admin and Wi-Fi passwords from a clean device.
Check router DNS and port forwarding settings.
Update and scan computers that used the same network shares.
If DNS errors or redirects remain after cleanup, use the DNS server isn’t responding after malware guide.
If scans keep finding the same threat, review the broader botnet infection signs and consider a router reset.

FAQ

Can my phone infect my PC through Wi-Fi?

Usually no by Wi-Fi alone. The risk rises if the phone sends a malicious file or link, the PC exposes vulnerable services, or both devices use weak shared credentials.

Can a router get malware?

Yes. Routers can be compromised through weak admin passwords, old firmware, exposed management panels, or known router vulnerabilities. A compromised router can redirect traffic or join a botnet.

Can ransomware spread over Wi-Fi?

Ransomware can spread across a local network when it reaches shared folders, weak remote access, exposed services, or stolen credentials. Wi-Fi is only the network path; the real issue is what the infected device can access.

Does a VPN stop malware spreading on Wi-Fi?

No. A VPN can protect internet traffic to the VPN server, but it does not fix infected devices, open file sharing, weak router passwords, or vulnerable local services.

Should guests use my main Wi-Fi?

No. Use a guest network when possible. It limits what visitor and IoT devices can see on your main network and reduces the chance that one compromised device can reach your computers.

References

CISA. “Securing Wireless Networks.” Cybersecurity and Infrastructure Security Agency, released February 1, 2021, accessed June 6, 2026. https://www.cisa.gov/news-events/news/securing-wireless-networks
Federal Trade Commission. “Are Public Wi-Fi Networks Safe? What You Need To Know.” FTC Consumer Advice, February 2023, accessed June 6, 2026. https://consumer.ftc.gov/articles/are-public-wi-fi-networks-safe-what-you-need-know
Microsoft Support. “Essential Network Settings and Tasks in Windows.” Microsoft, accessed June 6, 2026. https://support.microsoft.com/en-gb/windows/make-a-wi-fi-network-public-or-private-in-windows-0460117d-8d3e-a7ac-f003-7a0da607448d