4 ms·
Many many many years ago I worked at basically an MSP for telcos on the helpdesk. So customers would call their telco or isp for help and that would be routed t
by ecshafer 2y ago
Many many many years ago I worked at basically an MSP for telcos on the helpdesk. So customers would call their telco or isp for help and that would be routed to us. Anyways this one small isp with idk 10k customers had deployed their routers to customers with the default username/password and remote authentication enabled. A single script from a bad actor logged into all of the routers, changed credentials, and iirc updated dns settings so they lost internet, phone, tv. Cue 10k people calling as we had to basically walk through everyone one by one on changing the credentials and updating their config.
- myself248 2y agoWas that enough pain to force some sort of change in how the things were deployed thereafter?
- ecshafer 2y agoSort of, they changed it to a different username password that was the same on every box. So it wasn't easily findable from the internet but the same issue could have potentially happened again.