170

Backdoored firmware lets China state hackers control routers with “magic packets” (arstechnica.com)

submitted 9 months ago by L4s@lemmy.world to c/technology@lemmy.world

10 comments fedilink hide all child comments

Backdoored firmware lets China state hackers control routers with “magic packets”::The modified firmware used by BlackTech is hard to detect.

you are viewing a single comment's thread
view the rest of the comments

[-] spacecadet@lemm.ee 12 points 9 months ago

In an advisory of its own, Cisco said the threat actors are compromising the devices after acquiring administrative credentials and that there’s no indication they are exploiting vulnerabilities.

If they aren’t exploiting vulnerabilities (and this is all because of mishandling of admin creds) then why are only Cisco routers being targeted?

[-] Darkard@lemmy.world 14 points 9 months ago

They are loadi g in modified firmware apparently. Will be specific to Cisco hardware.

It's all kinda irrelevant though. If they managed to figure out your weak ass admin creds and you left your router open to access with no ACLs then installing some sneaky firmware is the least of your worries

[-] spacecadet@lemm.ee 2 points 9 months ago

True, I wonder how many of these admin creds were on internal wikis or something like user: admin password: admin123

[-] naticus@lemmy.world 3 points 9 months ago

How did you get my password? Please delete this.

[-] spacecadet@lemm.ee 3 points 9 months ago

12345? That’s the combination to my luggage

this post was submitted on 28 Sep 2023

170 points (97.8% liked)

Technology

55692 readers

4065 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS