IoTOct 8, 2016

DDoS’s Newest Minions: IoT Devices (Volume 1)

The latest evolution of cyber weapons is brought to you by the default passwords in Internet of Things (IoT) devices.

22 min read

[@portabletext/react] Unknown block type "downloadButton", specify a component for it in the `components.types` prop

Here are some high-level observations:

  • China, a major player in cyber-attacks, is unlikely to stop censoring the Internet in its own country or dial back its cyber opposition forces and nation-state espionage activities.
  • Global leaders like the US, Canada, and members of the EU will continue to be top monetary targets because they are strong financial sectors. As a result, a lot of today’s malware is targeted at the financial industry specifically, especially since the release of Zeus in 2011.
  • China, Russia, Ukraine, Brazil, and India will likely remain the top five countries from which DDoS attacks are launched.
  • China, followed by Russia, Romania, Brazil, and Vietnam, are the most likely countries where Command and Control (C&C) servers will be located.

To see the full version of this report, click "Download" below.

[@portabletext/react] Unknown block type "downloadButton", specify a component for it in the `components.types` prop
Share
Tags:Access,Android,App Infrastructure Attacks,Brute Force Attack,Credential Stuffing,Credential Theft,Cybercrime,DDoS Attacks,default admin credentials,DNS,DNS Amplification,Espionage,Heavy URL,home routers,hunt for IoT,Injection,IoT,IoT Security,lizard stresser,Mirai,Network,remote admin,Services,SYN, UDP, and HTTP Floods,Thingbot,Threat Research,Threats,Web Application Attacks

About the authors

Sara Boddy

Sara Boddy

Threat Researcher | F5

Sara Boddy was a Senior Director overseeing F5 Labs and Communities. She came to F5 from Demand Media where she was the Vice President of Information Security and Business Intelligence. Sara ran the security team at Demand Media for 6 years; prior to Demand Media, she held various roles in the information security community over 11 years at Network Computing Architects and Conjungi Networks.

More research by Sara Boddy
Justin Shattuck

Justin Shattuck

Threat Researcher | F5

Justin Shattuck was a Principal Threat Researcher for F5 Labs. He has been an avid threat hunter for most of his life and continually tracks attack campaigns and threat actors. He routinely participates in takedowns and helps to inform various law enforcement agencies of nefarious cyber activity. Justin has been a security product developer and researcher for over 15 years. Most recently he was the Manager of Product Development for F5 Silverline where he was responsible for developing features and enhancements to F5 Silverline's managed security services including Web Application Firewall and DDoS attack mitigation.

More research by Justin Shattuck