Issue remote code injection NAS326

Bls1990
Posts: 2
Freshman Member

Hi @Zyxel_Support
I have had unfortunately been hit with this ransomware. It looks to have reset/locked my password for ssh but not the GUI. I was able to login and I managed to upgrade firmware. However I was not able to reset the admin password via the GUI as it gave an error each time.
I have followed the 1 bleep reset and that didn't do anything. Followed the 2 bleep reset and that did reset the password. However now the admin account will only accept the default password, when I change it the system doesn't accept it and it loops back to having to try log in with the default again.
What do I do with this device now?
I have had unfortunately been hit with this ransomware. It looks to have reset/locked my password for ssh but not the GUI. I was able to login and I managed to upgrade firmware. However I was not able to reset the admin password via the GUI as it gave an error each time.
I have followed the 1 bleep reset and that didn't do anything. Followed the 2 bleep reset and that did reset the password. However now the admin account will only accept the default password, when I change it the system doesn't accept it and it loops back to having to try log in with the default again.
What do I do with this device now?
0
Comments
-
Try remove all HDD and reset again? maybe the problem is on disks.0
Categories
- All Categories
- 431 Beta Program
- 2.6K Nebula
- 168 Nebula Ideas
- 112 Nebula Status and Incidents
- 6K Security
- 366 USG FLEX H Series
- 294 Security Ideas
- 1.5K Switch
- 78 Switch Ideas
- 1.2K Wireless
- 42 Wireless Ideas
- 6.7K Consumer Product
- 265 Service & License
- 409 News and Release
- 87 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.9K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 83 Security Highlight