MikroTrick: Inside the RouterOS Takeover Chain
#bishopfox
Attackers were exploiting MikroTik routers before fixes went public. Bishop Fox reproduced the full unauthenticated takeover chain, found persistence artifacts on real compromised devices, and breaks down what defenders need to investigate beyond patching to confirm they are actually clean.
via BishopFox Blog
Post #1671
165