haxorflakes
New Around Here
as the title says, my rt-ac5300 got hacked and no amount of firmware updates, factory restores or nvram clearing will get rid of the hack.
the behavior it is exhibiting that makes me think it is hacked is it is accessing several suspicious websites while no one is accessing anything, as well as when a user connected to the router tries to navigate to myavista.com, it first tries to load a website called canarytokens.com at an ip address of 52.18.63.80. doing a nslookup for that domain gives me a different ip address.
my question is, is there a way of completely clearing the flash and all partitions and then reinstalling the firmware back to stock/merlin?
the behavior it is exhibiting that makes me think it is hacked is it is accessing several suspicious websites while no one is accessing anything, as well as when a user connected to the router tries to navigate to myavista.com, it first tries to load a website called canarytokens.com at an ip address of 52.18.63.80. doing a nslookup for that domain gives me a different ip address.
my question is, is there a way of completely clearing the flash and all partitions and then reinstalling the firmware back to stock/merlin?