6 ms·

Cisco warns 500,000 routers have been hacked in suspected Russian attack

34 points by yankcrime 8y ago

ommunist 8y ago
Is that so? I've heard Kaspersky traced that to be a US/UK controlled botnet behind the attack. https://www.kaspersky.com/blog/cisco-apocalypse/21966/ https://www.kaspersky.com/blog/cisco-apocalypse/21966/ and actually, a target is by location - in Russia.
crb002 8y ago
Interesting spin on Cisco getting caught yet again putting backdoors into their routers.
- mr_overalls 8y ago
  > We are unsure of the particular exploit used in any given case, but most devices targeted, particularly in older versions, have known public exploits or default credentials that make compromise relatively straightforward. Granted, this info is coming from Cisco, but it looks like no back door is necessary in this case.
- thephyber 8y ago
  I'm curious which company you work at such that every person in every department is 100% on the same page and adheres to the same conspiracy and never breaks from the corporate message.
remingtonc 8y ago
Technical breakdown at https://blog.talosintelligence.com/2018/05/VPNFilter.html https://blog.talosintelligence.com/2018/05/VPNFilter.html - "While the list may not be complete, the known devices affected by VPNFilter are Linksys, MikroTik, NETGEAR and TP-Link networking equipment in the small and home office (SOHO) space, as well at QNAP network-attached storage (NAS) devices."
mindslight 8y ago
Hopefully, having converged on this Schelling point of "Russian attack!", the so-called cyber [0] intelligence industry will have soon rendered itself moot. [0] a/s/l ?
MR4D 8y ago
I wonder if the Russian media publishes stories like this, but instead with the ending “...suspected NSA attack.” We all know they all do it. Is it just news because it’s the Russians this time?
- thephyber 8y ago
  There is a difference between Russian state-owned media and one of many US-based but privately-owned news companies. Answer to your question[1]. It looks more level-headed than your insinuation, but certainly targeted at undermining the US's (White House, Pentagon, NSA/other intel agencies, Congress, legislators, think tanks) authority in the cyber realm. [1] http://lmgtfy.com/?q=site%3Ahttps%3A%2F%2Fsputniknews.com%2F+(us%7Cpentagon%7Cnsa)+cyber http://lmgtfy.com/?q=site%3Ahttps%3A%2F%2Fsputniknews.com%2F...

34 points by yankcrime 8y ago

Is that so? I've heard Kaspersky traced that to be a US/UK controlled botnet behind the attack. https://www.kaspersky.com/blog/cisco-apocalypse/21966/ https://www.kaspersky.com/blog/cisco-apocalypse/21966/ and actually, a target is by location - in Russia.

crb002 8y ago

Interesting spin on Cisco getting caught yet again putting backdoors into their routers.

mr_overalls 8y ago
> We are unsure of the particular exploit used in any given case, but most devices targeted, particularly in older versions, have known public exploits or default credentials that make compromise relatively straightforward. Granted, this info is coming from Cisco, but it looks like no back door is necessary in this case.
thephyber 8y ago
I'm curious which company you work at such that every person in every department is 100% on the same page and adheres to the same conspiracy and never breaks from the corporate message.

remingtonc 8y ago

Technical breakdown at https://blog.talosintelligence.com/2018/05/VPNFilter.html https://blog.talosintelligence.com/2018/05/VPNFilter.html - "While the list may not be complete, the known devices affected by VPNFilter are Linksys, MikroTik, NETGEAR and TP-Link networking equipment in the small and home office (SOHO) space, as well at QNAP network-attached storage (NAS) devices."

mindslight 8y ago

Hopefully, having converged on this Schelling point of "Russian attack!", the so-called cyber [0] intelligence industry will have soon rendered itself moot. [0] a/s/l ?

MR4D 8y ago

I wonder if the Russian media publishes stories like this, but instead with the ending “...suspected NSA attack.” We all know they all do it. Is it just news because it’s the Russians this time?

thephyber 8y ago
There is a difference between Russian state-owned media and one of many US-based but privately-owned news companies. Answer to your question[1]. It looks more level-headed than your insinuation, but certainly targeted at undermining the US's (White House, Pentagon, NSA/other intel agencies, Congress, legislators, think tanks) authority in the cyber realm. [1] http://lmgtfy.com/?q=site%3Ahttps%3A%2F%2Fsputniknews.com%2F+(us%7Cpentagon%7Cnsa)+cyber http://lmgtfy.com/?q=site%3Ahttps%3A%2F%2Fsputniknews.com%2F...