Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

Attackers are exploiting MikroTik routers by accessing their Secure Shell remote-access service over the internet without authentication, gaining full administrative control. This exploit was first noted in attacks dating back to at least September 2. CERT Polska issued a warning about these attacks on September 5. The warning did not provide information on the number of victims.