CERT MW has been informed of an active attack that is using memcached servers to perform a reflected Denial of Service (DoS) attack. This allows attackers to send queries to the memcached servers on port UDP/11211 or TCP/11211 and spoof the source IP and port (the target). The response would be amplified and reflected back [...]

CERT MW has been informed of an active attack targeting MikroTik RouterOS devices.Attackers are identifying these devices by scanning for public IP addresses running specific RouterOS ports and using older versions of the operating system. Once the vulnerability is exploited, malware is downloaded to the compromised devices. The device is then being used to scan [...]