4 ms·

Article link is down on my end.

• ccnafr 8y ago
  It's basically another take on this older report: https://www.trustwave.com/Resources/SpiderLabs-Blog/Mass-MikroTik-Router-Infection-%E2%80%93-First-we-cryptojack-Brazil,-then-we-take-the-World-/ https://www.trustwave.com/Resources/SpiderLabs-Blog/Mass-Mik...
  • appleflaxen 8y ago
    that's a month old; has the compromise been going on that long? i guess so...
    • 24gttghh 8y ago
      It's been occurring since at least March I think? https://blog.mikrotik.com/security/winbox-vulnerability.html https://blog.mikrotik.com/security/winbox-vulnerability.html https://forum.mikrotik.com/viewtopic.php?f=21&t=137572 https://forum.mikrotik.com/viewtopic.php?f=21&t=137572
      • ccnafr 8y ago
        No. That's when the vulnerability was discovered. The cryptojacking attacks on routers began a month ago. Qihoo is just reporting on an ongoing campaign. But I didn't see anything different from the Trustwave report, except that attackers misconfigured some routers to send traffic into a blackhole for some reason.