Damn Hackers!

[CleverCat]

I'm still alive!

Had no International access for a week - my Router was hacked and before I realized (was off PC for 2 days - they had used up my monthly quota 5GB and most of my 500mb out of package at 20c per Mb  

Then they had the cheek to start using my 10GB of local only free data!

Now have more updated secure Router - more expense R500 -  

Only good news is: A friend heard my plight and immediately whipped out R100 - I have good friends bless them. and secondly I can now Access the net from my 2 Tablets without having PC on!  

What a week!!!

[crabby3]

I'm still alive!

Had no International access for a week - my Router was hacked and before I realized (was off PC for 2 days - they had used up my monthly quota 5GB and most of my 500mb out of package at 20c per Mb 

Then they had the cheek to start using my 10GB of local only free data!

Now have more updated secure Router - more expense R500 - 

Only good news is: A friend heard my plight and immediately whipped out R100 - I have good friends bless them. and secondly I can now Access the net from my 2 Tablets without having PC on! 

What a week!!!

Bad things happen to good people, CleverCat, but sounds like you're better off now?

Don't understand a lot of what you listed but, I guess, you were wirelessly hacked?   

Glad you're still alive. 

[Curt]

-same reaction here; I was not sure what you told us, because I don't understand the wireless world. Bruised but okay?

[IainB]

How was your router hacked? I am keen to know. We might all be able to learn something from this.
For example, if you accessed it via cable or wifi, or both, and what strength security (IDs and passwords, AES/TKIP or whatever) you had in place, and what level of security was switched on in the router itself, had you changed the standard password for admin in the router?

[x16wda]

To add on to IainB's questions, did you have remote administration enabled on the router?

[CleverCat]

First although I had Wireless (for my Tablets)  my Router is 'fixed' to Adsl line. It was an old Telkom Router and not very secure! Yes password was changed. No remote admin afaik..

Only one connection is allowed on my phone line and my IT friend says that they watch for an unused but on router during night - new one is now switched off at night....

It's a Trendnet 300mbps - been wanting for a while but other expenses kept popping up!

All good now.

[IainB]

@CleverCat: Thanks. That's rather interesting.
What was the loophole/weakness in the old modem that enabled hackers to use your account?
Does the new modem have the same loophole/weakness? If not, why are you switching the new one off at night?
Sorry to keep quizzing you.

[ewemoa]

A couple of things I like to check:

• Never use WEP -- go for WPA2
• Change the default admin password

[IainB]

^^ Good advice.
Wi-Fi Protected Access (WPA)
Wi-Fi Protected Access II (WPA2)
I don't think @CleverCat has told us which he was using, yet. If one wasn't using either, then it'd be a bit like leaving one's front door open.

[Renegade]

In the past I've had routers that touted WPA/2, but in reality, didn't quite work as advertised. That was years ago though, and where I lived, bandwidth was pretty much free.

[4wd]

And then there's the always useful WPS vulnerability: WPS Router Flaw Information

@CleverCat: Make sure you disable WPS in your router once you have set up any wireless devices that require it.

[Stoic Joker]

(and the more likely attack vector was) It also doesn't hurt to double check that you ISP didn't leave your pants down for you.

The ZyXEL 654 routers used by many ISPs had SNMP & telnet ports open by default for the convenience of their support personnel. *Sigh* This was later "fixed" after the wrong people noticed...

[IainB]

Useful notes by BearWare

[CleverCat]

A couple of things I like to check:

• Never use WEP -- go for WPA2
• Change the default admin password

Done!

And then there's the always useful WPS vulnerability: WPS Router Flaw Information

@CleverCat: Make sure you disable WPS in your router once you have set up any wireless devices that require it.

My friend set it up and WPS not enabled.

[CleverCat]

BTW IainB - CleverCat is a SHE! 

[IainB]

BTW IainB - CleverCat is a SHE! 

Oops, sorry. I had no idea...

[CleverCat]

No problem....