This board is now closed. The Blackhole image ended in 2020. The board will remain available in Read Only Mode, so all the posts from the last 15+ years are not lost. We thank you for being part of the community for the last 15+ years. You can join the OpenBh board if you have not already done so at www.openbh.net.

Someone took over my menus!

M

Markiow

Vu+ Newbie
Hi,

There I was watching tv when suddenly up popped up my plugins and Dream-Explorer was opened, then I watched as my ETC folder was opened. At that point I disconnected my internet connection.

Something similar happened yesterday too and it was just like watching someone have remote desktop access like you would on a pc.

I had port forwarding for which I have now stopped. My Telnet password is not default.

Anyone got any ideas or specifics? Is there anyway of finding out what was going on. Does BH have any logs for this type of access?

Thanks
 
I have just found out that it can be done via openwebif and using the handset control. I have now added password to openwebif, is this going to help? Can i put portforwarding on with confidence?
 
Take all the measures you can, change passwords to a combination of letters and numbers, change your dns address and maybe the default ports.
 
1. someone might be doing it within your own wifi zone (messing about with you);

or

2. a) they have/need your dns address, e.g. me.dyndns.org;
b) if so they can only do if your router settings are "too" open.

If 2nd option then your VU box is probably the least of your worries, you're likely to be at risk of other intrusions.
 
My DNS was not password protected so that is the easy way in and then to use the openwebif platform to use the 'remote'. Password now added to openwebif, lets see if thats the end of it !

Thanks folks
 
Putting p/w as advised by Artorius should protect your box, but an outsider should not have been able to access in the first place. Your router is open to intrusion (that is how they found your box if truly an external attack, or someone you told the dns address to/or set up on your behalf - more likely). I don't have http authentication enabled but you would not be able to see my VU box even if I gave you the dns address, let alone get access to the remote control via webif.

But I suppose that is not a matter for the VU forum, more your general security.
 
You must log in or register to reply here.
Back
Top