Voip / Mikrotik Hack

[mister]

I ignored the earlier Mikrotik hack warnings because I was busy...

Just got hacked and noticed calls from my asterisk box failing... luckily I had SMS warnings enabled.

Closed up the PPTP server they enabled and upgraded.

 

[Thor]

That sucks.

 

[mister]

That sucks.

Not so much for me because I had international calls disabled! And SMS warnings for failed calls so I quickly noticed something was up. A friend was not so lucky...

 

[AfricanTech]

I ignored the earlier Mikrotik hack warnings because I was busy...

Just got hacked and noticed calls from my asterisk box failing... luckily I had SMS warnings enabled.

Closed up the PPTP server they enabled and upgraded.

I tend to upgrade my Mikrotik to the latest packages as soon as they are released.

This hack is a bastard though 'cos there's no pre-emptive way to determine if you've been hacked

 

[mister]

I tend to upgrade my Mikrotik to the latest packages as soon as they are released.

This hack is a bastard though 'cos there's no pre-emptive way to determine if you've been hacked

I'm considering enabling auto upgrade!

 

[AfricanTech]

I'm considering enabling auto upgrade!

I check for updates every day - Winbox is perma open on my second monitor so it's a quick and easy check.

 

[AfricanTech]

What's new in 6.42.4 (2018-Jun-15 14:14):

*) bridge - allow to make changes for bridge port when it is interface list;
*) bridge - fixed FastPath for bridge master interfaces (introduced in v6.42);
*) certificate - fixed "add-scep" template existence check when signing certificate;
*) chr - fixed adding MSTI entries;
*) chr - fixed boot on hosts older than Windows Server 2012 when running CHR on Hyper-V;
*) chr - fixed various network hang scenarios when running CHR on Hyper-V;
*) console - fixed script permissions if script is executed by other RouterOS service;
*) dhcpv4-server - fixed DHCP server that was stuck on invalid state;
*) health - changed "PSU-Voltage" to "PSU-State" for CRS328-4C-20S-4S+;
*) health - fixed incorrect PSU i

 

[mister]

I check for updates every day - Winbox is perma open on my second monitor so it's a quick and easy check.

You can also subscribe to these RSS feeds:

https://mikrotik.com/download.rss
https://mikrotik.com/current.rss

 

[Sarel0092]

I check for updates every day - Winbox is perma open on my second monitor so it's a quick and easy check.

The script in the below link is great for automatic firmware upgrades on a schedule and can send email notifications when the firmware upgrade is completed.
https://github.com/massimo-filippi/mikrotik/blob/master/auto-upgrade.rsc

 

[AfricanTech]

The script in the below link is great for automatic firmware upgrades on a schedule and can send email notifications when the firmware upgrade is completed.
https://github.com/massimo-filippi/mikrotik/blob/master/auto-upgrade.rsc

Thanks.

I'm just so wary of doing an auto-update

 

[AfricanTech]

You can also subscribe to these RSS feeds:

https://mikrotik.com/download.rss
https://mikrotik.com/current.rss

Ta

 

[ArtyLoop]

I am also a victim... my laziness to upgrade the router caught up with me lol
I need to reinstall the bootloader and then the newest firmware... will get to it eventually