Many people – me included – complain about the sadness of IoT device security.
It seems the hackers found out it’s time to take advantage of that as within a week both these attacks by IoT devices took place:
- 650 Gigabit/second attack at the Krebs on Security [WayBack]
- 1 Terabit/second attacks at OVH [WayBack]
The first already suspected IoT devices, the latter confirmed it were ~ 150-thousand hijacked cameras and DVRs [WayBack] performing the attack.
Or in short:
The IoT strikes back
Few parties can cope with this kind of traffic (Akamai had to stop their pro bono servicing of Krebs on Security; it took a few days and a lot of effort for Google’s Project Shield to take over).
So I’ve a few questions for anyone running IoT devices:
- How secure are your IoT devices?
- Have you confined them to a network that’s easily filtered/shut-down in case of emergency?
Edit 20161004:
- Source Code for IoT botnet responsible for World’s largest DDoS Attack released Online [WayBack] via Joe C. Hecht on G+: Coming to a Toaster new You.
- Source Code for IoT Botnet ‘Mirai’ Released — Krebs on Security [WayBack]
–jeroen
Source: Da ist einiges neu an dem Fall: 1) Ein bisher unbekanntes Botnetz. a) Das neue…
The Wiert Corner - irregular stream of stuff 