D-Link Forums

The Graveyard - Products No Longer Supported => D-Link Storage => DNR-202L => Topic started by: secure_wifi on March 16, 2017, 06:51:42 PM

Title: Hacked?
Post by: secure_wifi on March 16, 2017, 06:51:42 PM
I have had my DNR-202L setup for about 9 months and haven't had a need to go into it. I just tried to log on and got the screen below. I am taking a guess that my device was hacked and all of my video is gone. It there any way to restore the firmware?

(http://i.imgur.com/QqRncdp.png)
Title: Re: Hacked?
Post by: RYAT3 on March 16, 2017, 07:17:10 PM
Which F/W were you running?

Was your DNR202L open to the outside world (other than mydlink.com) via port forwarding?

Are you using easy passwords? 

Your router might have been hacked , and your DNS might be affected? (re-direct attack?)

Go here

https://www.mydlink.com/download#
 (https://www.mydlink.com/download#)

click Storage
Click dnr-202L
download HDD Viewer

you should be able to see your videos, unless your harddrive is trashed too.

It would definitely be curious if they hacked your DNR202L entirely and replaced the F/W... can I replace yours with a new one? lol

Title: Re: Hacked?
Post by: RYAT3 on March 16, 2017, 07:40:22 PM
You might not have been on the latest f/w?

july 2016 warns

http://blog.senr.io/blog/400000-publicly-available-iot-devices-vulnerable-to-single-flaw
 (http://blog.senr.io/blog/400000-publicly-available-iot-devices-vulnerable-to-single-flaw)
Title: Re: Hacked?
Post by: FurryNutz on March 17, 2017, 07:01:12 AM
Link>Welcome! (http://forums.dlink.com/index.php?topic=48135.0)


What Mfr and model is the main host router?

I'd scan your PC and other PCs for any malware using MalwareBytes.
This is supposedly patched in v2.04:
http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10062 (http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10062)

Quote from: secure_wifi on March 16, 2017, 06:51:42 PM
I have had my DNR-202L setup for about 9 months and haven't had a need to go into it. I just tried to log on and got the screen below. I am taking a guess that my device was hacked and all of my video is gone. It there any way to restore the firmware?

(http://i.imgur.com/QqRncdp.png)
Title: Re: Hacked?
Post by: secure_wifi on March 18, 2017, 03:42:12 PM
Thanks for the HDD Viewer!

I was on the older firmware. I ran a factory reset and that allowed me to upgrade to the latest. The problem seems to be resolved. Thanks for the troubleshooting tips!
Title: Re: Hacked? (RESOLVED)
Post by: FurryNutz on March 18, 2017, 04:41:50 PM
Glad you got it working and cleared up.

Enjoy.  ;)
Title: Re: Hacked?
Post by: RYAT3 on March 18, 2017, 06:32:12 PM
Quote from: secure_wifi on March 18, 2017, 03:42:12 PM
Thanks for the HDD Viewer!

I was on the older firmware. I ran a factory reset and that allowed me to upgrade to the latest. The problem seems to be resolved. Thanks for the troubleshooting tips!

Even if they exploited on mdlink cloud attack, I'd still be changing all my passwords and making them as strong as dlink allows.
Title: Re: Hacked?
Post by: FurryNutz on March 19, 2017, 12:05:35 PM
This is the first I've seen this kind of hack on the DNR. I've been using same PW on mine. Of course I keep mine up to date.  ::)