Community discussions

MikroTik App
 
djfrancis
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 78
Joined: Thu Feb 02, 2012 12:01 am

6.42 attacked??

Mon Apr 23, 2018 10:43 am

Hi, since last update to v6.42 severals SXT on our network, was infected/modified creating PPPoE server itself, and now our pppoe-clients are connected to "false" servers with http redirects to "Your Internet Connecion has been Hacked"!!

If i make a PPPoE scan on a CPE client, i can see several PPPoE servers called "server"

Any suggestion/help?

Thanks!
 
User avatar
BartoszP
Forum Guru
Forum Guru
Posts: 3359
Joined: Mon Jun 16, 2014 1:13 pm
Location: Poland

Re: 6.42 attacked??

Mon Apr 23, 2018 10:53 am

Maybe you are victim of viewtopic.php?f=2&t=133438
 
djfrancis
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 78
Joined: Thu Feb 02, 2012 12:01 am

Re: 6.42 attacked??

Mon Apr 23, 2018 11:44 am

Hi BartoszP, may be the problem was the same, but in my case, all infected CPE are now PPPoE server with AC-NAME=Mikrotik and service name=server.

When i try to log in to CPE i get invalid username/password..

If you need additional info, please tell me.

Thanks.
 
tippenring
Member
Member
Posts: 304
Joined: Thu Oct 02, 2014 8:54 pm
Location: St Louis MO
Contact:

Re: 6.42 attacked??

Tue Apr 24, 2018 9:01 pm

You might want to follow this thread: viewtopic.php?p=655739#p655739