Page 1
Page 1
Started By
Message

I was hacked

Posted on 7/15/17 at 4:16 pm
Posted by lsugrad35
Jambalaya capital of the world
Member since Feb 2007
3177 posts
Posted on 7/15/17 at 4:16 pm
Went out of town for a week and when I came back and tried to play a movie from my external hd that's on my network, everything was gone and there was a text file named you've been hacked telling me to pay $100 to a bitcoin account. It was backed up so I just reformatted but it got me thinking of what I need to do to better secure my network. Thoughts?

Router is an Asus RT-AC66U

I changed my password and quit broadcasting my SSID
This post was edited on 7/15/17 at 4:19 pm
Posted by The Great McGinty
Member since Jan 2017
1384 posts
Posted on 7/15/17 at 4:22 pm to
You gone get raped!

Posted by HailToTheChiz
Back in Auburn
Member since Aug 2010
48894 posts
Posted on 7/15/17 at 5:15 pm to
Sounds like you aren't telling the whole story....
Posted by efrad
Member since Nov 2007
18644 posts
Posted on 7/15/17 at 5:30 pm to
afaik those ASUS routers had an exploit that allowed the storage drives attached to them to be accessed over the internet. Make sure you update the router firmware. That's probably how it happened.

It's got nothing to do with your wifi password/SSID.
Posted by lsugrad35
Jambalaya capital of the world
Member since Feb 2007
3177 posts
Posted on 7/15/17 at 5:40 pm to
Actually yes that's the whole story...

Thanks for the info efrad. I figured it didn't have anything to do with that but I'm not a network guru so I just tried taking every precaution. I'll look into the firmware.
Posted by Corporal Beavis
Member since Aug 2013
1206 posts
Posted on 7/15/17 at 5:49 pm to
Haha that sucks dude
Posted by Spankum
Miss-sippi
Member since Jan 2007
55979 posts
Posted on 7/15/17 at 9:19 pm to
pretty damn crazy shite, there. gotta wonder just how much money those folks make on that....
Posted by t00f
Not where you think I am
Member since Jul 2016
89758 posts
Posted on 7/15/17 at 9:43 pm to
You think someone within wifi range hacked into your network and ran ransomeware?
Posted by CAD703X
Liberty Island
Member since Jul 2008
77946 posts
Posted on 7/15/17 at 9:50 pm to
No. They gained entry through his NAS
Posted by t00f
Not where you think I am
Member since Jul 2016
89758 posts
Posted on 7/15/17 at 10:37 pm to
Just looked it up, it appears anonymous FTP is enabled by default on a HD attached to this device, wow is that nuts.
Posted by Spock's Eyebrow
Member since May 2012
12300 posts
Posted on 7/15/17 at 11:57 pm to
quote:

It's got nothing to do with your wifi password/SSID.



That model router had the WPS vulnerability from a few years ago, so it could be WiFi related. That would be very interesting, because it would mean the criminal was close by.
Posted by efrad
Member since Nov 2007
18644 posts
Posted on 7/16/17 at 3:31 pm to
quote:

That model router had the WPS vulnerability from a few years ago, so it could be WiFi related. That would be very interesting, because it would mean the criminal was close by.



It would be interesting, but since it's a ransomware attack it's highly unlikely the attacker is even on the same side of the globe.
first pageprev pagePage 1 of 1Next pagelast page
refresh

Back to top
logoFollow TigerDroppings for LSU Football News
Follow us on Twitter, Facebook and Instagram to get the latest updates on LSU Football and Recruiting.

FacebookTwitterInstagram