Gazzl80
Tuning in
Joined 3 years ago
User Profile
User Widgets
Contributions
Re: Mirai and Network Attack
Hi, You may not be able to tell me the device but you can tell me the IP address it came from on my network. It is worth noting that we have over 50 always-on IoT devices. These range from plugs, smart speakers, lights, Ring equipment etc How would i clear a Smart TV? a CCTV System that doesn't even run on windows? a smart plug that didn't have a password, just a pairing mode? a smart light? etc etc etc when you have 50 odd Always-on devices you can start to see my problem. I have no idea which plug or light has been hacked or how to clear the plugs, IoT of malware. As it turns out we did have an old D-Link 5030L camera. i have read an article saying that because it is an old camera and is unsupported it could well be the malware attack. But with no-one at VM willing to tell me what IP on my network it is coming from we are in the dark. It is unfair to then send a letter saying that our connection may be disconnected. This is not something anyone has done purposefully. Last few questions. VM say they were "informed by a third party" who is the third party? are they trust worthy enough? can we know who it is please? Many thanks for you reply 🙂 have a good week. Regards,894Views0likes2CommentsMirai and Network Attack
We have had 2 emails. The first saying we had something attached to our network infected with Mirai. I called in to VM and they couldn't tell me what time the attack was logged. It may have been my Dlink camera that has gone unsupported, and I have later found that Dlink had a flaw. So that camera has gone in the bin. Problem sorted? Perhaps not. 2nd email saying "a device using your internet connection may be infected with malware. We've been informed by a third party (not sure who that is!) that malicious traffic has been detected coming from a device using your internet connection. We don't know which device this is" it goes on to say "we need to let you know that if you don't get it fixed, to protect others, we may need to suspend or cancel your services in line with our acceptable use policy" I have scanned our devices with Malware bytes, and it has found nothing. I have updated software. Could it be our CCTV system causing a false positive? I phoned in after the first letter and got zero help.1KViews0likes6Comments