Visitor

 • 

4 Messages

Monday, February 21st, 2022

Closed

Man in the Middle Attack?

Hello all:

For the last several weeks, I've suspected that my router was hacked. So much so, I used what little money I had to buy a bridged router running DD-WRT to put my network on a VPN. Unfortunately, the processor was too slow. I removed it. I constantly get texts messages saying that my Xfi router details have changed or providing the details when I did not request them, and my router constantly and suddenly disconnects for 1-5 minutes, only to reappear.

I use Fing to monitor my network. I did a wireless scan two days ago and noticed that my Xfi router was broadcasting my SSID in the 5 Ghz band twice within 1-5 decibals of each other. One was marked protected, the other "open" and "unprotected." It looks like a MITM attack. Though, I've reset the modem/router combo twice and it always reappears. 

Does anyone else use Fing? Do you seee something similar when you run the Wi-Fi Scanner tool? (On MacOS, Tools > Wi-Fi Scanner.) Or am I just the subject of a MITM attack?

The second 5Ghz router is listed with a Mac Address of 00:00:00:00:00 and with a mfg. of Xerox, which doesn't mean anything since Mac Addresses are spoofed (I have all mine spoofed).

Oldest First
Selected Oldest First

Problem Solver

 • 

493 Messages

4 years ago

Hi, @user_f7b76a. Thank you for taking the time to reach out to us via our Forums Page. I see where we were previously working with you on a matter similar to this one from a previous post. We have received your Direct Message and have responded to it. We appreciate you keeping us updated on the matter and look forward to working with you via Direct Message.

Expert

 • 

112.8K Messages

4 years ago

@user_f7b76a @XfinityLuis 

Please circle back here and post any possible solutions for the issue here in the open forums so that all readers here may benefit from the exchange / info. This is in keeping with the spirit for which these public help forums were originally intended. Thank you.

forum icon

New to the Community?

Start Here