[Bologna] Apparati Ubiquiti a rischio

[ThEgAmEr]

URGENT WARNING: Massive attacks to Ubiquiti Hardware
_RECOMMENDATIONS_

Dear customers,

Since last Friday, the current software base of Ubiquiti Networks has
suffered a wave of attacks that have affected many WISP customers and
operators worldwide. Apparently, it is caused by a virus with global
reach that exploits a localized vulnerability that was already
resolved last year, and that especially affects Ubiquiti AirMax and
AirFiber hardware with the following (or previous) firmware releases:

Airmax 5.6.4(XM/XW), 4.0.4(XS)
AirFiber AF24/AF24HD 2.2.1 or 3.2.
AirFiber AF5X 3.0.2.1+


While waiting for an official statement from the manufacturer, here at
Landatel we want to warn you about this situation and recommend this
article (in spanish) done by a group of clients and friends who have
researched over the weekend in order to provide a solution that
detects and cleans infected hardware.
http://www.sincables.net/2016/05/ataque-masivo-a-equipos-ubiquiti/

As preventive measures, and because the virus attacks hardware with
outdated firmware, we suggest you install ASAP the latest published
firmware for all affected models. We also siggest you to block HTTP(S)
and SSH access to the equipment and follow closely the following
Ubiquiti forum thread:
https://community.ubnt.com/t5/airMAX-General-Discussion/Virus-attack-URGENT-UBNT/td-p/1562940/page/13