topic Re: SAGEMCOM FAST 5364 - Hacked firmware in Broadband

SAGEMCOM FAST 5364 - Hacked firmware

Jolnir — Wed, 04 Sep 2024 06:01:37 GMT

I think someone has hacked my router at the route level and enabled a bunch of sureillance settings and custom firewall settings utilising the exploit located at this url: https://github.com/shiroiokami85/talktalk_fast_5364

This exploit allows SSH for P2P remote surveillance, various sites aren't loading properly after factory reset and firewall resets on my computer, very specific political sites that aren't banned or restricted in the UK.

I've added a screenshot of my firmware, I think autoupdate has been disabled too. Is there any way I can get a link to the latest update to manually update my firmware or perhaps a new router?

Re: SAGEMCOM FAST 5364 - Hacked firmware

Debbie-TalkTalk — Wed, 04 Sep 2024 06:27:18 GMT

Hi Jolnir

Please can you add your name and TalkTalk landline number to your Community Profile, we can then take a look at this for you.

Thanks

Debbie

Re: SAGEMCOM FAST 5364 - Hacked firmware

Jolnir — Wed, 04 Sep 2024 06:31:24 GMT

Done

Re: SAGEMCOM FAST 5364 - Hacked firmware

Debbie-TalkTalk — Wed, 04 Sep 2024 06:50:53 GMT

Hi @Jolnir

Thanks for updating your Community Profile.

We do have new firmware available. Will it be ok for me to update your firmware now?

We advise to leave the router switched on without rebooting whilst we update the firmware. It should take no longer than 15 minutes to update.

Debbie

Re: SAGEMCOM FAST 5364 - Hacked firmware

Jolnir — Wed, 04 Sep 2024 07:43:48 GMT

I'm concerned that the root level adjustments might remain intact after a firmware update, can you confirm if this is the case or not? Otherwise go ahead with the update.

Re: SAGEMCOM FAST 5364 - Hacked firmware

Debbie-TalkTalk — Wed, 04 Sep 2024 07:56:10 GMT

Hi Jolnir

If you factory reset your router using the pin hole reset for ten seconds then this will set the router back to default settings.

Please can you try this before we do the firmware update.

Re: SAGEMCOM FAST 5364 - Hacked firmware

Jolnir — Wed, 04 Sep 2024 08:16:42 GMT

I did it before contacting and the hackers adjustments remained

Re: SAGEMCOM FAST 5364 - Hacked firmware

Debbie-TalkTalk — Wed, 04 Sep 2024 08:17:40 GMT

Hi Jolnir

Ok, would you like me to just replace the router?

Re: SAGEMCOM FAST 5364 - Hacked firmware

Jolnir — Wed, 04 Sep 2024 08:21:21 GMT

Yeah lets do that. Will it come with the latest firmware?

Re: SAGEMCOM FAST 5364 - Hacked firmware

Debbie-TalkTalk — Wed, 04 Sep 2024 08:24:39 GMT

Hi Jolnir

The replacement router is on its way, please allow 24-48hrs for this to arrive.

Please let me know (here) once the new router is connected and I will check the firmware.

Thanks

Debbie

Re: SAGEMCOM FAST 5364 - Hacked firmware

Jolnir — Wed, 04 Sep 2024 08:46:06 GMT

Re: SAGEMCOM FAST 5364 - Hacked firmware

Anonymous — Fri, 06 Sep 2024 11:36:05 GMT

Good afternoon,

How are you getting on?

Thanks

Michelle

Re: SAGEMCOM FAST 5364 - Hacked firmware

Jolnir — Thu, 12 Sep 2024 08:18:13 GMT

Hello all

My new router has arrived and I wondering if you could check/force a firmware update

Thanks

Re: SAGEMCOM FAST 5364 - Hacked firmware

Debbie-TalkTalk — Thu, 12 Sep 2024 08:25:04 GMT

Hi @Jolnir

That's great, thanks for letting us know 🙂

I've just updated your router firmware to the latest version.

Thanks again.

Debbie

Re: SAGEMCOM FAST 5364 - Hacked firmware

Jolnir — Thu, 12 Sep 2024 08:34:58 GMT

Ok perfect thank you

Re: SAGEMCOM FAST 5364 - Hacked firmware

Debbie-TalkTalk — Thu, 12 Sep 2024 08:37:10 GMT

Hi @Jolnir

No problem 🙂

I've sent you a Private Message with a link to a short survey for the Community.

Thanks again.

Debbie