Anyone who is active in the OpenWrt forum must manually set a new password. The operator initiated this after a successful attack on the forum. The OpenWrt Wiki should not be affected by the security incident.

The Linux distribution is installed, for example, on routers and smartphones as alternative firmware. For example, routers can be configured more individually and used as a WLAN access point with installed VPN functionality.

User data copied One According to a security notice in the forum, attackers were able to access user data with an admin account on 16 January 2021. So far it is unclear how the unknown attackers cracked the account. The forum operators speak of a “good” password. Two-factor authentication was probably not activated.

According to the forum operators, the intruders were able to download a list of users that included e-mail addresses . According to the current state of knowledge, there was no access to the database, explain those responsible. The wording does not reveal whether passwords have been leaked.

Assign a new password For security reasons, the forum operators have them all Passwords reset. Members must assign a new password on the website. In addition, those responsible have reset all API keys. They warn that members could expect an increased amount of spam due to the copied email addresses.

(des)