• March 29, 2024, 04:00:37 AM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: Hacked?  (Read 3993 times)

secure_wifi

  • Level 1 Member
  • *
  • Posts: 2
Hacked?
« on: March 16, 2017, 06:51:42 PM »

I have had my DNR-202L setup for about 9 months and haven't had a need to go into it. I just tried to log on and got the screen below. I am taking a guess that my device was hacked and all of my video is gone. It there any way to restore the firmware?

Logged

RYAT3

  • Level 10 Member
  • *****
  • Posts: 2254
Re: Hacked?
« Reply #1 on: March 16, 2017, 07:17:10 PM »

Which F/W were you running?

Was your DNR202L open to the outside world (other than mydlink.com) via port forwarding?

Are you using easy passwords? 

Your router might have been hacked , and your DNS might be affected? (re-direct attack?)

Go here

https://www.mydlink.com/download#


click Storage
Click dnr-202L
download HDD Viewer

you should be able to see your videos, unless your harddrive is trashed too.

It would definitely be curious if they hacked your DNR202L entirely and replaced the F/W... can I replace yours with a new one? lol

Logged

RYAT3

  • Level 10 Member
  • *****
  • Posts: 2254
Re: Hacked?
« Reply #2 on: March 16, 2017, 07:40:22 PM »

Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Hacked?
« Reply #3 on: March 17, 2017, 07:01:12 AM »

Link>Welcome!

  • What Hardware version is your DNR? Look at the sticker behind or under the device.
  • Link>What Firmware version is currently loaded if you remember?
  • What region are you located?

What Mfr and model is the main host router?

I'd scan your PC and other PCs for any malware using MalwareBytes.
This is supposedly patched in v2.04:
http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10062

I have had my DNR-202L setup for about 9 months and haven't had a need to go into it. I just tried to log on and got the screen below. I am taking a guess that my device was hacked and all of my video is gone. It there any way to restore the firmware?


« Last Edit: March 17, 2017, 07:05:02 AM by FurryNutz »
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

secure_wifi

  • Level 1 Member
  • *
  • Posts: 2
Re: Hacked?
« Reply #4 on: March 18, 2017, 03:42:12 PM »

Thanks for the HDD Viewer!

I was on the older firmware. I ran a factory reset and that allowed me to upgrade to the latest. The problem seems to be resolved. Thanks for the troubleshooting tips!
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Hacked? (RESOLVED)
« Reply #5 on: March 18, 2017, 04:41:50 PM »

Glad you got it working and cleared up.

Enjoy.  ;)
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

RYAT3

  • Level 10 Member
  • *****
  • Posts: 2254
Re: Hacked?
« Reply #6 on: March 18, 2017, 06:32:12 PM »

Thanks for the HDD Viewer!

I was on the older firmware. I ran a factory reset and that allowed me to upgrade to the latest. The problem seems to be resolved. Thanks for the troubleshooting tips!

Even if they exploited on mdlink cloud attack, I'd still be changing all my passwords and making them as strong as dlink allows.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Hacked?
« Reply #7 on: March 19, 2017, 12:05:35 PM »

This is the first I've seen this kind of hack on the DNR. I've been using same PW on mine. Of course I keep mine up to date.  ::)
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.