Hello everyone, we were the victims of a hacker attack last Sunday. From our perspective, the attackers gained access to our infrastructure by injecting code into the current firmware, creating an SSL VPN group including users and rules. Everything was detected and switched off early, but our IPSec VPN still crashes at irregular intervals and memory usage continues to increase. Zyxel support only advised using the firmware that was released 2 weeks later. Has anyone seen something similar and found a solution?

Hi @Zyxel_Melen we changed all adminuser passwords and disabled all ssl vpn features.

Attack ATP 800 - firmware 5.39 - ssl vpn

Options