As the manufacturer MikroTik announced, a malicious botnet is currently using one Vulnerability in the RouterOS Winbox service , which was patched in RouterOS v6.42.1 on April 23, 2018.

Since all RouterOS devices offer free upgrades with just two clicks, we recommend that you update your devices using the “Check for Updates” button if you have not already done so.

Which steps we strongly recommend:

1. Update RouterOS to the latest version
2. Change your password after upgrading
3. Restore your configuration and check for unknown settings
4. Implement a good firewall as described in the following article: https://wiki.mikrotik.com/wiki/Manual:Securing_Your_Router

Is your device affected?
All versions from 6.29 ( Release date: 2015/28/05 ) to 6.42 ( Publication date 2018/04/20 ) are vulnerable.

Further information on the topic can be found here: https://blog.mikrotik.com

Please do not hesitate to contact us for any questions or assistance in implementing the important updates.