Critical RCE bug in 92,000 D-Link NAS devices now exploited in attacks

[mikece]

https://www.bleepingcomputer.com/news/security/critical-rce-bug-in-92-000-d-link-nas-devices-now-exploited-in-attacks/

[Havoc]

> hardcoded account (username "messagebus" with an empty password)

Jikes

> D-Link informed them that these end-of-life devices would not be patched

wtf. How do you fuck up that badly and then just casually go no we’re just going to let the dumpster fire burn until it’s burned out

[bcrl → Havoc]

Not a surprise. Their history predicted this: https://www.ftc.gov/news-events/news/press-releases/2019/07/...