[ITEM]
13.03.2020
89

There are several reports that FRITZ!Box modems have been 'hacked'. FRITZ!Box modems are, for example, 'widely' used in The Netherlands.

>> 'you can easily install other firmware'

That's what I did, I flashed it with a custom firmware (that was after I got aware of the backdoor). I've not 'reverse-engineered' the base image of my own router like in the article above, because that's a lot of work. I've worked on an awful lot of routers, hubs, switches of all sorts, enterprise and consumer. Have been network administrator for a large global company and I think that I can trust my sources.

What the new user 'blablablaat ' mentioned is obvious, I'm not stupid to make something like this up. Of course I have no 'Provider Services' or anything remotely similar enabled, but it's still possible to connect to the router and take control over it according to my source and I've seen it back then, when I asked for him/her to show it. Now why, do you expect me to prove that? A security researcher, is more qualified than me to create the convincing report you're asking for, sorry. You can feel free to do it yourself too, if you want. It's not my intention to spread rumors or FUD, but to make you at least aware of that your router ain't secure.

AVM, the producer of the well-known home router FRITZ!Box, has issued a security advisory and contacted all users of the cloud service MyFRITZ! to warn them about a potential fraudulent use of telephone services connecting through FRITZ!Box routers.

(click to enlarge)

According to AVM, it appears that attackers are connecting to the router on the external interface and somehow get administrative access. Such an attack is only possible if the attacker knows the precise combination of e-mail address or FRITZ!Box username, FRITZ!Box IP address, and the passwords for remote access and the FRITZ!Box interface. All these are available in the MyFRITZ! cloud service. With this information, they are able to add an expensive VoIP provider and set it as default service for telephony. This way, any phone call made through the AVM router would be made through the expensive VoIP provider.

AVM says that it is possible that these attacks are linked to the theft of 16 million digital identities that was recently announced by the German Federal Office for Information Security (BSI).

AVM also advises users to change the password of the email address registered in the Push service.

Seeing this advice, I can’t stop thinking that it might be possible that the MyFRITZ! cloud service was hacked and the user data compromised. I guess we will know this after AVM finishes their investigations.

Here is how to make sure that you are not a victim and how to prevent to become one:

Checking telephony devices and deleting unknown IP telephones.

Delete any unknown IP telephones to make sure that the cannot be used to make make fraudulent calls:

  1. Click “Telephony” in the FRITZ!Box user interface.
  2. Click “Telephony Devices” in the “Telephony” menu.
  3. 3. You can recognize IP telephones because “LAN/WLAN” will be displayed in the “Connection” or “Port” column for that telephone. Click the corresponding “Delete” button to delete any IP telephones you are not familiar with.

Deleting call diversions to unknown telephone numbers and disabling call through

  1. Click “Telephony” in the FRITZ!Box user interface.
  2. Click “Call Handling” in the “Telephony” menu.
  3. Switch to the “Call Diversion” tab and delete all entries that divert calls to international numbers you are not familiar with.
  4. Switch to the “Call Through” tab and disable the option “Enable call through”.
  5. Click “Apply” to save your settings.

More details are available on the AVM website.

Sorin Mustaca

Hp 6127 driver windows 10. HP Officejet Driver Download - HP Drivers Printer Although that the Deskjet appears like any lower-end, home-oriented HP inkjet, this printer's hp deskjet 6127 series put it hp deskjet 6127 series in the SOHO market. HP Deskjet 6122 / 6127 Driver for MacOS X 2.7.1 (38.89MB) HP Deskjet 6122 / 6127 Driver for MacOS X. Download the latest version update for HP Deskjet 6122 / 6127 Driver for MacOS X. It is for use with Mac OS X v.10.1.5, v.10.2.x, v.10.3 and OS X v.10.4, although HP recommends that you update to the latest version of Mac OS X. The downloadable file includes a driver installer, which also installs the newest deskjet printer utility. This package supports the following driver models:hp deskjet 6127 series. Enter to Search. Update drivers for your HP LaserJet 1020 printer.

Thank you for reading this post on Avira Techblog! For latest news please follow us on Facebook, Twitter, Google+.

from Avira – TechBlog http://bit.ly/1iwcLKL
via IFTTT


© Copyright Sorin Mustaca, All rights Reserved. Written For: Sorin Mustaca on Cybersecurity
Check www.mustaca.com for the IT Consulting services I offer.
Visit www.itsecuritynews.info for latest security news in English
Besuchen Sie https://de.itsecuritynews.info für IT Sicherheits News auf Deutsch
[/ITEM]
[/MAIN]
13.03.2020
9

There are several reports that FRITZ!Box modems have been 'hacked'. FRITZ!Box modems are, for example, 'widely' used in The Netherlands.

>> 'you can easily install other firmware'

That's what I did, I flashed it with a custom firmware (that was after I got aware of the backdoor). I've not 'reverse-engineered' the base image of my own router like in the article above, because that's a lot of work. I've worked on an awful lot of routers, hubs, switches of all sorts, enterprise and consumer. Have been network administrator for a large global company and I think that I can trust my sources.

What the new user 'blablablaat ' mentioned is obvious, I'm not stupid to make something like this up. Of course I have no 'Provider Services' or anything remotely similar enabled, but it's still possible to connect to the router and take control over it according to my source and I've seen it back then, when I asked for him/her to show it. Now why, do you expect me to prove that? A security researcher, is more qualified than me to create the convincing report you're asking for, sorry. You can feel free to do it yourself too, if you want. It's not my intention to spread rumors or FUD, but to make you at least aware of that your router ain't secure.

AVM, the producer of the well-known home router FRITZ!Box, has issued a security advisory and contacted all users of the cloud service MyFRITZ! to warn them about a potential fraudulent use of telephone services connecting through FRITZ!Box routers.

(click to enlarge)

According to AVM, it appears that attackers are connecting to the router on the external interface and somehow get administrative access. Such an attack is only possible if the attacker knows the precise combination of e-mail address or FRITZ!Box username, FRITZ!Box IP address, and the passwords for remote access and the FRITZ!Box interface. All these are available in the MyFRITZ! cloud service. With this information, they are able to add an expensive VoIP provider and set it as default service for telephony. This way, any phone call made through the AVM router would be made through the expensive VoIP provider.

AVM says that it is possible that these attacks are linked to the theft of 16 million digital identities that was recently announced by the German Federal Office for Information Security (BSI).

AVM also advises users to change the password of the email address registered in the Push service.

Seeing this advice, I can’t stop thinking that it might be possible that the MyFRITZ! cloud service was hacked and the user data compromised. I guess we will know this after AVM finishes their investigations.

Here is how to make sure that you are not a victim and how to prevent to become one:

Checking telephony devices and deleting unknown IP telephones.

Delete any unknown IP telephones to make sure that the cannot be used to make make fraudulent calls:

  1. Click “Telephony” in the FRITZ!Box user interface.
  2. Click “Telephony Devices” in the “Telephony” menu.
  3. 3. You can recognize IP telephones because “LAN/WLAN” will be displayed in the “Connection” or “Port” column for that telephone. Click the corresponding “Delete” button to delete any IP telephones you are not familiar with.

Deleting call diversions to unknown telephone numbers and disabling call through

  1. Click “Telephony” in the FRITZ!Box user interface.
  2. Click “Call Handling” in the “Telephony” menu.
  3. Switch to the “Call Diversion” tab and delete all entries that divert calls to international numbers you are not familiar with.
  4. Switch to the “Call Through” tab and disable the option “Enable call through”.
  5. Click “Apply” to save your settings.

More details are available on the AVM website.

Sorin Mustaca

Hp 6127 driver windows 10. HP Officejet Driver Download - HP Drivers Printer Although that the Deskjet appears like any lower-end, home-oriented HP inkjet, this printer's hp deskjet 6127 series put it hp deskjet 6127 series in the SOHO market. HP Deskjet 6122 / 6127 Driver for MacOS X 2.7.1 (38.89MB) HP Deskjet 6122 / 6127 Driver for MacOS X. Download the latest version update for HP Deskjet 6122 / 6127 Driver for MacOS X. It is for use with Mac OS X v.10.1.5, v.10.2.x, v.10.3 and OS X v.10.4, although HP recommends that you update to the latest version of Mac OS X. The downloadable file includes a driver installer, which also installs the newest deskjet printer utility. This package supports the following driver models:hp deskjet 6127 series. Enter to Search. Update drivers for your HP LaserJet 1020 printer.

Thank you for reading this post on Avira Techblog! For latest news please follow us on Facebook, Twitter, Google+.

from Avira – TechBlog http://bit.ly/1iwcLKL
via IFTTT


© Copyright Sorin Mustaca, All rights Reserved. Written For: Sorin Mustaca on Cybersecurity
Check www.mustaca.com for the IT Consulting services I offer.
Visit www.itsecuritynews.info for latest security news in English
Besuchen Sie https://de.itsecuritynews.info für IT Sicherheits News auf Deutsch