News for hackers. Stuff that matters.

A comment on Belgian ISP under 250 Gbps DDoS for days on end. Parent comment

Re:Belgian ISP under 250 Gbps DDoS for days on end by omginternets on Saturday September 18, 2021 @09:53PM (#28581024)
> recent microtik CVE

I bought a mikrotik router recently, for my home network. How can I tell if I am impacted by this, and are there any mitigation strategies?

[ Parent | on HN ]
Re:Belgian ISP under 250 Gbps DDoS for days on end by ryuuchin on Saturday September 18, 2021 @10:15PM (#28581140)
https://blog.mikrotik.com/security/meris-botnet.html

It's not really recent (2018) just that it's still being used after all this time. If you're using a default config on the home router you're basically already fine (save for changing the default login).

[ Parent | on HN ]
Re:Belgian ISP under 250 Gbps DDoS for days on end by Kemejii on Saturday September 18, 2021 @10:17PM (#28581146)
Microtik DDOS attacks are using CVE-2018-14847. [1]

If your router is up-to-date and not previously compromised, you should be fine.

[1] https://blog.mikrotik.com/security/meris-botnet.html

[ Parent | on HN ]