200,000+ MikroTik routers worldwide compromised to inject cryptojacking malware
1–10 of 76 posts
Re: 200,000+ MikroTik routers worldwide compromised to inject cryptojacking malware
#2this is getting even bigger: 421K+ routers compromised - https://twitter.com/bad_packets/status/1050533001824595968
Re: 200,000+ MikroTik routers worldwide compromised to inject cryptojacking malware
#3I guess nobody listened [0].
But considering some of the comments on that thread, I'm not entirely shocked.
> Attackers will not be able to use that, nor will they care.
> If you're exposing that unfettered to the web at large, imo you deserve what you get.
Did no one really think 200,000 devices was a worthwhile target?
Re: 200,000+ MikroTik routers worldwide compromised to inject cryptojacking malware
#4If you have a currency that can be generated via compute power the incentive structure it creates is to take over as much compute power as you can. Does the incentive structure represent a serious design flaw in the system for widespread adoption?
Re: 200,000+ MikroTik routers worldwide compromised to inject cryptojacking malware
#5So ... which SoHo router manufacturer can we actually trust? It seems pretty common in this industry to either not supply security updates, or to only supply them for a very short amount of time.
Re: 200,000+ MikroTik routers worldwide compromised to inject cryptojacking malware
#6So ... which SoHo router manufacturer can we actually trust? It seems pretty common in this industry to either not supply security updates, or to only supply them for a very short amount of time.
Seems like the solution is still to see what router models are supported by your favorite aftermarket firmware.
Re: 200,000+ MikroTik routers worldwide compromised to inject cryptojacking malware
#7So ... which SoHo router manufacturer can we actually trust? It seems pretty common in this industry to either not supply security updates, or to only supply them for a very short amount of time.
Turris omnia. Open source (both hardware and software), lets you ssh into it directly out of the box (well, after you have set a root password in the gui)
They provide regular software updates, and it is imho a good hacker/tinkerer router.
Re: 200,000+ MikroTik routers worldwide compromised to inject cryptojacking malware
#8http://pcengines.ch/ APU2 plus debian. Be secure. Maybe I'll tidy up the ansible I use for this and publish it.
Re: 200,000+ MikroTik routers worldwide compromised to inject cryptojacking malware
#9So ... which SoHo router manufacturer can we actually trust? It seems pretty common in this industry to either not supply security updates, or to only supply them for a very short amount of time.
See my post above: APU2 by pcengines. Put debian on it.
Re: 200,000+ MikroTik routers worldwide compromised to inject cryptojacking malware
#10So ... which SoHo router manufacturer can we actually trust? It seems pretty common in this industry to either not supply security updates, or to only supply them for a very short amount of time.
See my post above: APU2 by pcengines. Put debian on it.
It's a great piece of hardware, of which I've used dozens for various purposes. But they draw ~10 times more power than, say, a cheap Linksys wifi router. So if all you're after is a SoHo wifi router, it might not be the best way to go.