Bigpipe DNS cache pollution?

Forums › Spark New Zealand (including Skinny and BigPipe) › Bigpipe DNS cache pollution?

1 | 2

zks

9 posts

Wannabe Geek

#2242323 21-May-2019 13:16

freitasm: Yes but keep other computers off until password changed.

You say computers, do I need to keep my phone/pad off as well?

Thank you!

michaelmurfy

meow
13257 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2242351 21-May-2019 14:11

@zks you have a PM - it is important so read it carefully.

To everyone else. Once I have permission from the OP and the issue has been mitigated I'll post what has been found.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

cddt

1561 posts

Uber Geek

#2242375 21-May-2019 15:06

michaelmurfy:
@zks you have a PM - it is important so read it carefully.

To everyone else. Once I have permission from the OP and the issue has been mitigated I'll post what has been found.

Curiouser and curiouser!

michaelmurfy

meow
13257 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2242414 21-May-2019 15:11

As promised - without disclosing too many details there was a infected cheap Chinese DVR with a set, default root password, and several backdoor user accounts running on the OP's network. There is malware running on it and I suspect it has been doing some nasty things. I am not 100% sure what kind of malware it was running but looks to be linked to the Mirai botnet. It is bad, without authentication I could view the cameras.

This is why folks you NEVER port forward to any DVR's especially those purchased off ebay / aliexpress. You're just asking for trouble if you do. More expensive, name brand DVR's have their own secure cloud solution and others should only be accessed via a VPN.

@sbiddle posted an excellent blog post here: https://www.geekzone.co.nz/sbiddle/8941

BarTender

3606 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2242443 21-May-2019 16:02

And I wonder how much Geeks on Wheels or similar services may have charged to fix it if they would have even found it.
Standard going rate would be $180-200 per hour if you're lucky to find someone good.

freitasm

BDFL - Memuneh
79294 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2242578 21-May-2019 18:30

I am locking because this is now solved and it is not a Bigpipe problem.

1 | 2