Report on an emergency situation on the network

Dear subscribers,

Prepared a report on the emergency situation on the network that arose today 10.11.23

11:00, a large-scale DDoS attack ( DNS Flood ) was detected on our DNS servers.
11:30, localized the cause, namely, the flood occurred from client hacked equipment (Wi-Fi routers)

It is worth noting that our equipment is configured to protect against such external hacking not from our network. Pre-installed manufacturers of hacked equipment, these are routers TP link, Xiaomi.

11:50, our team of experts took action and resolved the impact on the network and subscriber services.
After 11:50, we continued to receive calls from some subscribers with complaints about the non-working service or its degradation. This impact on the service occurred in subscribers who had a router hacked, because when connecting directly to a laptop or computer, the problem immediately disappeared. Thus, we found the manufacturers of routers that were affected.
At approximately 14:00, we stopped recording calls from subscribers on this problem.

Currently, our team is actively working to identify patterns and vulnerabilities of routers of these brands that can be used for such attacks. Subsequently, we will provide recommendations and instructions to our subscribers.