Perry

Comments

• The reason I said I loaded a config that was saved before infection is because the procedure to remove the infection stated not to load an old config because it could have been tainted (configured for back doors) during the infection. But my config was saved in 2018 long before this infection occurred so we know it's a…

  in Important Detection and Remediation Actions for Cyclops Blink State-Sponsored Botnet Comment by Perry March 2022
• I know the official procedure and the suggestion. What I wanted confirmation from you is weather a clean test really means clean or not. From what your saying I gather that a test could return clean yet I could still be infected. So basically I should treat the test result as meaningless, correct?

  in Important Detection and Remediation Actions for Cyclops Blink State-Sponsored Botnet Comment by Perry March 2022
• Is it possible for the detector https://detection.watchguard.com/Detector to claim that the box is clean (green indicator) yet still be infected? I ask because I did not follow the directions exactly as indicated because I don't have on-site access to the router. This box (T35) tested as infected initially. I then applied…

  in Important Detection and Remediation Actions for Cyclops Blink State-Sponsored Botnet Comment by Perry February 2022
• I found the problem. It doesn't work in Firefox but Works in Chrome. Watchguard should fix this issue.

  in Important Detection and Remediation Actions for Cyclops Blink State-Sponsored Botnet Comment by Perry February 2022
• Yes I tried the other method "Web Detector" and it won't let me upload the file. Errors out with "Files must be a gzip or tar archive" but it is.

  in Important Detection and Remediation Actions for Cyclops Blink State-Sponsored Botnet Comment by Perry February 2022
• I tried from both and same problem. Is it not encrypted because I can open it and read all the text files. They are in the clear.

  in Important Detection and Remediation Actions for Cyclops Blink State-Sponsored Botnet Comment by Perry February 2022
• The WSM tool does not work (inconclusive), and the web detector at https://detection.watchguard.com/Detector doesn't work. I try to upload file "support.tgz" and gives error "Files must be a gzip or tar archive".

  in Important Detection and Remediation Actions for Cyclops Blink State-Sponsored Botnet Comment by Perry February 2022
• Is there a way to upgrade OS from Watchguard System Manager app? If so how?

  in Important Detection and Remediation Actions for Cyclops Blink State-Sponsored Botnet Comment by Perry February 2022
• OS upgrade doesn't work from either "Download and Install" option nor the "I have an upgrade file" function. The first fails because the servers are down and the second I get 'is_admin' error. So how are we supposed to upgrade then?

  in Important Detection and Remediation Actions for Cyclops Blink State-Sponsored Botnet Comment by Perry February 2022