Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

200,000+ MikroTik routers worldwide compromised to inject cryptojacking malware

badpackets.net

Post reply on HN
Print view View original

71–76 of 76 posts

Re: 200,000+ MikroTik routers worldwide compromised to inject cryptojacking malware

#71

Post by r1ch »

srednalfden wrote: post #60
foepys wrote: post #17

Earlier quoted context omitted.

Germany (or rather DACH) has AVM, a German manufacturer that is making the "Fritz!Box" product line and supplied security updates to all affected routers they ever sold after somebody discovered and exploited a bug in the firmware to remotely call premium numbers via VoIP in various countries. Their routers were also not affected by the KRACK WPA2 exploit last year. AVM products cost a lot more than their competitors…

Not affected by Krack? Is this the marketing mouth of AVM?

As KRACK is a client vulnerability, an access point shouldn't be vulnerable in the first place.

Re: 200,000+ MikroTik routers worldwide compromised to inject cryptojacking malware

#72

Post by eltoozero »

throwaway9d0291 wrote: post #43
hkt wrote: post #25

Does anyone know if Ubiquiti's edgerouters are any good?

In my experience, no, they're not. Their wireless gear is great but when it comes to wired, I'd avoid them. There's a serious bug [0] on the ER-X-SFP that's been around for over a year without any serious action from Ubiquiti. Their support when I tried to get an RMA for said issue was utterly abysmal. [0]: https://community.ubnt.com/t5/EdgeRouter/EdgeRouter-X-SFP-le...

Agreed, I run MikroTik on the wired side and UniFi for the AP side; have many installs in my charge and this is our default deployment when “more WiFi” is requested.

Re: 200,000+ MikroTik routers worldwide compromised to inject cryptojacking malware

#73

Post by ac29 »

NoErx wrote: post #62
hkt wrote: post #25

Does anyone know if Ubiquiti's edgerouters are any good?

I have an EdgeRouter X and I'm searching for a replacement. EdgeRouter X issues: * 3.10 kernel. This is out of LTS support. * Poor IPv6 support. The GUI has practically 0 support and you instead have to learn EdgeOS config, and it's awkward. I'm happy to use EdgeRouter X as a switch, so I'm looking for a SBC that can act as router/firewall and run vanilla Debian.

The latest development release updates the ER-X to kernel 4.4, which is LTS until at least 2022. The base OS is updated to Debian Stretch also.

I think that's a pretty good level of support for a $49 device.

Re: 200,000+ MikroTik routers worldwide compromised to inject cryptojacking malware

#74

Post by 24gttghh »

philamonster wrote: post #52
24gttghh wrote: post #44

Earlier quoted context omitted.

This is why we do backups :) I always assume something will go wrong, but make sure to have a backup of any critical device that is being updated (mikrotik or not). Did your hAP run out of flash disk space? I notice that it only has 16MB.

I recently purchased their outdoor wAP ac (same amount of flash) that deletes any "backups/exports" on disk after reboot. I'm not familiar with CAPsMAN but I wonder if there's a mechanism to backup to either the controller or external repo. There's always the scripting route to ship configs elsewhere etc.

I email the backups to myself (routerOS scripting) using a dedicated gmail account, but the backup is also written to an external USB stick on my device.

Re: 200,000+ MikroTik routers worldwide compromised to inject cryptojacking malware

#75

Post by blacksmith_tb »

thecatspaw wrote: post #21
anc84 wrote: post #20

Earlier quoted context omitted.

300€ is about 5 times what I would consider a price to pay for a home router though.

this depends on what you want out of it I guess. I wanted a tinker router, one which doesnt treat me like an absolute idiot, with a spf for fiber, can do gigabit easily and is expandable.

The hAP-ac I have also ticks most of these boxes[1], but costs less than half what the Turris does (no PCIe, but I am not sure what I'd use that for in a router).

1: https://mikrotik.com/product/RB962UiGS-5HacT2HnT

Re: 200,000+ MikroTik routers worldwide compromised to inject cryptojacking malware

#76

Post by SuoDuanDao »

Tae3cahN wrote: post #34
SuoDuanDao wrote: post #12

Earlier quoted context omitted.

I would say it's a consequence of computer power becoming commoditized - the flaw might be that using computer power in the past can be 'stored', unlike hijacking someone else's computer and renting it out as server space, there's a point in this kind of crime where one has the profits and got away with it. I just had this thought and want to get it down, apologies for the rant: I suspect that philosophically, the ba…

I think both types of currency are important. Humans have basic needs which need to be met in the shape of atoms and joules which are quite storable. We also have luxury wants which translate better to watts. This separation might also be useful in the context of UBI schemes. And more generally I have a gut feeling, but can't quite substantiate, that many fairness problems stem from using the same currency for both,…

Fascinating! That makes excellent sense.
Post reply on HN