DDOS, Firmware and IoT - Cyber Security Informer

KrebsOnSecurity Hit By Huge New IoT Botnet “Meris”

Krebs on Security

SEPTEMBER 10, 2021

On Thursday evening, KrebsOnSecurity was the subject of a rather massive (and mercifully brief) distributed denial-of-service (DDoS) attack. But on Thursday DDoS protection firm Qrator Labs identified the culprit — “Meris” — a new IoT monster that first emerged at the end of June 2021. In its Aug.

IoT

IoT DDOS Internet Internet

STEPS FORWARD: Regulators are on the move to set much needed IoT security rules of the road

The Last Watchdog

SEPTEMBER 5, 2023

New government rules coupled with industry standards meant to give formal shape to the Internet of Things (IoT) are rapidly quickening around the globe. When it comes to IoT, we must arrive at specific rules of the road if we are to tap into the full potential of smart cities, autonomous transportation and advanced healthcare.

IoT

IoT Government Internet Internet

New Ttint IoT botnet exploits two zero-days in Tenda routers

Security Affairs

OCTOBER 5, 2020

Security researchers provided technical details about an IoT botnet dubbed Ttint that has been exploiting two zero-days in Tenda routers. Security researchers at Netlab, the network security division Qihoo 360, have published a report that details an IoT botnet dubbed Ttint. ” concludes the report. Pierluigi Paganini.

IoT

IoT Firmware Advertising DNS

Attacks Escalating Against Linux-Based IoT Devices

eSecurity Planet

JANUARY 20, 2022

Incidents of malware targeting Linux-based Internet of Things (IoT) devices jumped by more than a third in 2021, with three malware families the primary drivers behind the increase. That echoes similar reports that have shown an increase in DDoS attacks worldwide. Also read: Top 8 DDoS Protection Service Providers for 2022.

IoT

IoT DDOS Malware Internet

Overview of IoT threats in 2023

SecureList

SEPTEMBER 21, 2023

IoT devices (routers, cameras, NAS boxes, and smart home components) multiply every year. The first-ever large-scale malware attacks on IoT devices were recorded back in 2008, and their number has only been growing ever since. Telnet, the overwhelmingly popular unencrypted IoT text protocol, is the main target of brute-forcing.

IoT

IoT DDOS Passwords Malware

Mozi Botnet is responsible for most of the IoT Traffic

Security Affairs

SEPTEMBER 20, 2020

The Mozi botnet accounted for 90% of the IoT network traffic observed between October 2019 and June 2020, IBM reported. Mozi is an IoT botnet that borrows the code from Mirai variants and the Gafgyt malware , it appeared on the threat landscape in late 2019. reads the analysis published by the experts. ” continues the analysis.

IoT

IoT DDOS Architecture Passwords

Both Mirai and Hoaxcalls IoT botnets target Symantec Web Gateways

Security Affairs

MAY 19, 2020

“There is no evidence to support any other firmware versions are vulnerable at this point in time and these findings have been shared with Symantec.” The botnet borrows the code from Tsunami and Gafgyt botnets, it expanded the list of targeted devices and added new distributed denial of service (DDoS) capabilities.

IoT

IoT DDOS Authentication Advertising

IoT Cybersecurity: 5 Major Vulnerabilities and How to Tackle Them

Security Affairs

OCTOBER 13, 2020

The number of sensors and smart devices connected to the internet is exponentially rising, which are the 5 Major Vulnerabilities for IoT devices. If you take a look at the global market for IoT, you can easily spot the trend. IoT devices are exposed to cybersecurity vulnerabilities. IoT is a complicated concept.

IoT

IoT Cybersecurity Manufacturing Internet

Attackers Exploit Flaw that Could Impact Millions of Routers, IoT Devices

eSecurity Planet

AUGUST 10, 2021

In a recent blog post , the researchers said the bad actors are looking to leverage a path traversal vulnerability that could affect millions of home routers and other Internet of Things (IoT) devices that use the same code base and are manufactured by at least 17 vendors. A Pattern of Exploits.

IoT

IoT DDOS Internet Internet

Million of Telestar Digital GmbH IoT radio devices can be remotely hacked

Security Affairs

SEPTEMBER 10, 2019

A security researcher disclosed zero-day flaws in Telestar Digital GmbH IoT radio devices that could be exploited by remote attackers to hijack systems without any user interaction. The hardware of the terminals is equipped with Shenzen technology, while the firmware is based on BusyBox Linux Debian. . ” continues the experts.

IoT

IoT Hacking Firmware Advertising

Multiple DDoS botnets were observed targeting Zyxel devices

Security Affairs

JULY 22, 2023

Researchers warn of several DDoS botnets exploiting a critical flaw tracked as CVE-2023-28771 in Zyxel devices. Fortinet FortiGuard Labs researchers warned of multiple DDoS botnets exploiting a vulnerability impacting multiple Zyxel firewalls. through 4.73, VPN series firmware versions 4.60 through 5.35.

DDOS

DDOS Firmware VPN Firewall

Home routers are being hijacked using vulnerability disclosed just 2 days ago

Malwarebytes

AUGUST 9, 2021

Router firmware. Under the description of CVE-2021-20090 you will find: “a path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 It started with Mirai taking advantage of insecure IoT devices in a simple but clever way.

Firmware

Firmware DDOS Internet Internet

Moobot botnet spreads by exploiting CVE-2021-36260 flaw in Hikvision products

Security Affairs

DECEMBER 8, 2021

The vulnerability is an unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP camera/NVR firmware, it was discovered by a security researcher that goes online with the moniker “Watchful IP.”. The expert pointed out that every firmware developed since 2016 has been tested and found to be vulnerable.

Firmware

Firmware DDOS Malware IoT

Realtek-based routers, smart devices are being gobbled up by a voracious botnet

Malwarebytes

AUGUST 24, 2021

Mirai hoovers up vulnerable Internet of Things (IoT) devices and adds them to its network of zombie devices, which can then be used to launch huge Distributed Denial of Service (DDoS) attacks. Realtek chipsets are found in many embedded IoT devices. At least 65 vendors are affected. Exactly what Mirai wants. Vulnerabilities.

Firmware

Firmware IoT Internet Internet

Interview With a Crypto Scam Investment Spammer

Krebs on Security

MAY 22, 2023

Shortly after that, those same servers came under a sustained distributed denial-of-service (DDoS) attack. Chaput said whoever was behind the DDoS was definitely not using point-and-click DDoS tools, like a booter or stresser service. “On Twitter, more spam and crypto scam.”

Scams

Scams DDOS Cryptocurrency Accountability

Spyware in the IoT – the Biggest Privacy Threat This Year

SiteLock

AUGUST 27, 2021

Simply defined, the internet of things (IoT) is a network of Internet-connected objects able to collect and exchange data. In today’s digital-driven world, IoT connects almost everything including homes, offices, and vehicles, allowing users the convenience of activating and operating nearly any device remotely. Think again.

IoT

IoT Spyware VPN Passwords

Beware the Cyber Ghouls: Spooky Threats Lurking in Digital Shadows

SecureWorld News

OCTOBER 31, 2024

These botnets, networks of compromised devices, can perform attacks without the user realizing it, overwhelming networks, spreading spam, and even launching DDoS attacks. Warding off zombies : Regularly update device firmware, patch IoT devices, and monitor for unusual traffic patterns.

IoT

IoT Phishing DDOS Backups

Router security in 2021

SecureList

JUNE 8, 2022

To find out why cybercriminals attack routers, it is first worth looking at the Top 10 malware detected by our IoT traps in 2021. Attacks by this malware as a percentage of all attacks on Kaspersky IoT honeypots in 2021. Discovered back in 2016, it remains the most common malware infecting IoT devices. Router-targeting malware.

DDOS

DDOS Passwords IoT Firmware

Securing Public Sector Against IoT Malware in 2024

Security Boulevard

JANUARY 11, 2024

The rapid proliferation of the Internet of Things (IoT) represents vast opportunities for the public sector. However, as IoT innovation and adoption grows, so do the associated security risks. However, as IoT innovation and adoption grows, so do the associated security risks.

IoT

IoT Malware Education Government

InfectedSlurs botnet targets QNAP VioStor NVR vulnerability

Security Affairs

DECEMBER 17, 2023

In November, Akamai warned of a new Mirai -based DDoS botnet, named InfectedSlurs , actively exploiting two zero-day vulnerabilities to infect routers and video recorder (NVR) devices. that impacted several routers, including Future X Communications (FXC) AE1021 and AE1021PE wall routers, running firmware versions 2.0.9 and earlier.

Firmware

Firmware Wireless DDOS IoT

Why Healthcare IoT Requires Strong Machine Identity Management

Security Boulevard

MAY 30, 2022

Why Healthcare IoT Requires Strong Machine Identity Management. The healthcare industry has been leveraging IoT devices for years, steadily increasing its use in facilities and patient care. By 2027, the IoT in Healthcare market is expected to reach $290 billion , up from just $60 billion in 2019. brooke.crothers.

Healthcare

Healthcare IoT Manufacturing Risk

A new Zerobot variant spreads by exploiting Apache flaws

Security Affairs

DECEMBER 22, 2022

Microsoft Threat Intelligence Center (MSTIC) researchers discovered a new variant of the Zerobot botnet (aka ZeroStresser) that was improved with the capabilities to target more Internet of Things (IoT) devices. com) with links to the bot was among the 48 domains associated with DDoS-for-hire services seized by the FBI in December.

IoT

IoT DDOS Malware Firmware

Millions of home routers on Mirai Botnet Radar

CyberSecurity Insiders

AUGUST 13, 2021

According to a research carried out by Maryland based Cybersecurity firm Tenable, hackers are targeting millions of home routers to add them to the Mirai botnet radar that is used to launch DDoS Cyber attack campaigns.

Firmware

Firmware Malware DDOS Manufacturing

Experts hacked 28,000 unsecured printers to raise awareness of printer security issues

Security Affairs

AUGUST 27, 2020

To perform the experiment, we used Internet of Things (IoT) search engines to search for open devices that utilized common printer ports and protocols. To find out how many printers were on the menu for our experiment, we searched for IP addresses with open ports on specialized IoT search engines, such as Shodan and Censys.

Hacking

Hacking IoT Firmware Internet

OpenSSH trojan campaign targets Linux systems and IoT devices

Malwarebytes

JUNE 26, 2023

Poorly configured Linux and Internet of Things (IoT) devices are at risk of compromise from a cryptojacking campaign , according to researchers at Microsoft. A portion of the install makes use of an open-source IRC bot with Distributed Denial of Service (DDoS) features. That’s not all, however. There’s botnet activity too.

IoT

IoT Adware Firmware Internet

TP-Link High-Severity Flaw Added to Mirai Botnet Arsenal

Heimadal Security

APRIL 27, 2023

A TP-Link Archer A21 (AX1800) consumer-grade WiFi router vulnerability has been used by Mirai botnet to launch DDoS attacks against IoT devices. The flaw in the TP-Link Archer AX21 firmware was discovered back in December 2022, and the company released a patch in March.

Firmware

Firmware DDOS IoT Cybersecurity

Beastmode Mirai botnet now includes exploits for Totolink routers

Security Affairs

APRIL 2, 2022

Operators behind the Mirai-based distributed denial-of-service (DDoS) botnet Beastmode (aka B3astmode) added exploits for Totolink routers. The Mirai -based distributed denial-of-service (DDoS) botnet Beastmode (aka B3astmode) now includes exploits for Totolink routers. ” concludes the report. ” concludes the report.

DDOS

DDOS Firmware Surveillance IoT

Mozi P2P Botnet also targets Netgear, Huawei, and ZTE devices

Security Affairs

AUGUST 20, 2021

Mozi is an IoT botnet that borrows the code from Mirai variants and the Gafgyt malware , it appeared on the threat landscape in late 2019. According to the researchers, in the last months of 2019, the botnet was mainly involved in DDoS attacks. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

IoT

IoT DNS Manufacturing Firmware

Naming & Shaming Web Polluters: Xiongmai

Krebs on Security

OCTOBER 9, 2018

In late 2016, the world witnessed the sheer disruptive power of Mirai , a powerful botnet strain fueled by Internet of Things (IoT) devices like DVRs and IP cameras that were put online with factory-default passwords and other poor security settings. A rendering of Xiongmai’s center in Hangzhou, China. Source: xiongmaitech.com.

Computers and Electronics

Computers and Electronics IoT Passwords Internet

5 Signs a Cyberattack Is Under Way and 5 Things You Need to Do Before It Happens

Adam Levin

FEBRUARY 10, 2020

Distributed denial of service attacks (DDoS) are a very likely mode of attack. There is little you can do in the event we experience widespread DDoS attacks, but one tip is to buy a good book series or a few board games since it might take a while to get the internet working again. Update Everything.

Passwords

Passwords Phishing Password Management Accountability

MITRE, CISA Reveal Dangerous Hardware & Software Vulnerabilities

eSecurity Planet

NOVEMBER 4, 2021

Hackers can exploit these weaknesses to compromise computer systems, exfiltrate data, and even perform DDoS attacks. CWE-1277 : Firmware Not Updateable – firmware exploitation exposes the victim to a permanent risk without any possibility to patch weaknesses. The most popular firmware is BIOS and UEFI.

Software

Software Firmware Computers and Electronics Risk

Mirai code re-use in Gafgyt

Security Affairs

APRIL 16, 2021

Gafgyt (also known as Bashlite) is a prominent malware family for *nix systems, which mainly target vulnerable IoT devices like Huawei routers, Realtek routers and ASUS devices. HTTP flooding is a kind of DDoS attack in which the attacker sends a large number of HTTP requests to the targeted server to overwhelm it. UDP flood module.

Malware

Malware DDOS IoT Authentication

AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits

CyberSecurity Insiders

NOVEMBER 11, 2021

Deployed with more than 30 exploits, it has the potential of targeting millions of routers and IoT devices. It also has different DDoS functionality. Ax with firmware 1.04b12 and earlier. NETGEAR DGN2200 devices with firmware through 10.0.0.50. Affected products include: NAS326 before firmware V5.21(AAZF.7)C0

Malware

Malware IoT Firmware Authentication

Mukashi, the new Mirai variant that targets Zyxel NAS

Security Affairs

MARCH 21, 2020

Multiple, if not all, Zyxel NAS products running firmware versions up to 5.21 Once it has infected a device, the Mukashi bot performs brute-force attacks in the attempt to compromise other IoT devices on the network and contacts the C&C server if a login attempt has been successful. The vendor advisory is also available.

DDOS

DDOS Authentication Advertising Firmware

Over 80,000 Hikvision cameras can be easily hacked

Security Affairs

AUGUST 23, 2022

The vulnerability is an unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP camera/NVR firmware, it was discovered by a security researcher that goes online with the moniker “Watchful IP.”. The expert confirmed that every firmware developed since 2016 has been tested and found to be vulnerable.

Hacking

Hacking Firmware Internet Internet

Machine Identities are Essential for Securing Smart Manufacturing

Security Boulevard

FEBRUARY 28, 2022

The following are six advantages of IoT in the manufacturing industry. Integrating IoTs into monitoring both equipment settings and the outcomes of each production step helps manufacturers detect quality problems at the source. . Transitioning to a smart factory requires paying close attention to industrial IoT security.

Manufacturing

Manufacturing IoT Authentication Artificial Intelligence

Over 600,000 SOHO routers were destroyed by Chalubo malware in 72 hours

Security Affairs

MAY 31, 2024

Chalubo (ChaCha-Lua-bot) is a Linux malware that was first spotted in late August 2018 by Sophos Labs while targeting IoT devices. Threat actors aimed at creating a botnet used to launch DDoS attacks. The experts believe with high confidence that the malicious firmware update was a deliberate act intended to cause an outage.

Malware

Malware Internet Internet Firmware

Webinar on cyberattacks in Ukraine – summary and Q&A

SecureList

MARCH 14, 2022

While most of the current attacks are of low complexity – such as DDoS or attacks using commodity and low-quality tools – more sophisticated attacks exist also, and more are expected to come. We also covered unknown and unattributed attacks and hacktivist activity taking place in the same timeframe.

DDOS

DDOS Internet Internet Firmware

Top 9 Cybersecurity Challenges SMEs Currently Face

Responsible Cyber

APRIL 8, 2020

IoT Opens Excessive Entry Points. The Internet of Things (IoT) is undeniably the future of technology. It is imperative for employers to now ensure that all IoT devices are set up correctly and no room for a network breach is left. DDoS Attacks. Indeed, it has added convenience to our hectic schedules. SQL Injection.

Cybersecurity

Cybersecurity DDOS Small Business Phishing

The Death botnet grows targeting AVTech devices with a 2-years old exploit

Security Affairs

JULY 25, 2018

EliteLands is using a 2-years old exploit that could be used to trigger tens of well-known vulnerabilities in the AVTech firmware. Many products of the vendor currently run the vulnerable firmware, including DVRs, NVRs, and IP cameras. “The Death botnet purpose was orginally just to ddos but I have a greater plan on it soon.

Firmware

Firmware Passwords Advertising IoT

2024 State of Cybersecurity: Reports of More Threats & Prioritization Issues

eSecurity Planet

MAY 2, 2024

Vendor reports note huge volume of attacks on local and public infrastructure, such as: CrowdStrike: Monitored hacktivist and nation-state distributed denial of service (DDoS) attacks related to the Israli-Palestinian conflict, including against a US airport. 50,000 DDoS attacks on public domain name service (DNS) resolvers.

Cybersecurity

Cybersecurity DDOS Penetration Testing Passwords

Thousands of Xiaomi FURRYTAIL pet feeders exposed to hack

Security Affairs

OCTOBER 30, 2019

A Russian security researcher accidentally discovered API and firmware issues that allowed her to take over all Xiaomi FurryTail pet feeders. The Russian security researcher Anna Prosvetova, from Saint Petersburg, has accidentally discovered API and firmware issues that allowed her to take over all Xiaomi FurryTail pet feeders.

Hacking

Hacking Firmware Advertising DDOS

Experts discloses dangerous flaws in robotic Dongguan Diqee 360 smart vacuums

Security Affairs

JULY 20, 2018

“Like any other IoT device, these robot vacuum cleaners could be marshalled into a botnet for DDoS attacks, but that’s not even the worst-case scenario, at least for owners. “A microSD card could be used to exploit weaknesses in the vacuum’s update mechanism.

Firmware

Firmware Surveillance Technology Authentication

Cyber Security Roundup for March 2021

Security Boulevard

FEBRUARY 28, 2021

From IoT devices to internet-based services, the security of countless devices and web-based services' are dependant upon a secure Linux account privilege model. DDoS Attacks Leverage Plex Media Server. SonicWall issues Firmware Patch after Attackers Exploited Critical Bugs. Redscan NIST Security Vulnerability Trends 2020.

Energy and Utilities

Energy and Utilities Ransomware DDOS Accountability

KrebsOnSecurity Hit By Huge New IoT Botnet “Meris”

STEPS FORWARD: Regulators are on the move to set much needed IoT security rules of the road

Trending Sources

New Ttint IoT botnet exploits two zero-days in Tenda routers

Attacks Escalating Against Linux-Based IoT Devices

Overview of IoT threats in 2023

Mozi Botnet is responsible for most of the IoT Traffic

Both Mirai and Hoaxcalls IoT botnets target Symantec Web Gateways

IoT Cybersecurity: 5 Major Vulnerabilities and How to Tackle Them

Attackers Exploit Flaw that Could Impact Millions of Routers, IoT Devices

Million of Telestar Digital GmbH IoT radio devices can be remotely hacked

Multiple DDoS botnets were observed targeting Zyxel devices

Home routers are being hijacked using vulnerability disclosed just 2 days ago

Moobot botnet spreads by exploiting CVE-2021-36260 flaw in Hikvision products

Realtek-based routers, smart devices are being gobbled up by a voracious botnet

Interview With a Crypto Scam Investment Spammer

Spyware in the IoT – the Biggest Privacy Threat This Year

Beware the Cyber Ghouls: Spooky Threats Lurking in Digital Shadows

Router security in 2021

Securing Public Sector Against IoT Malware in 2024

InfectedSlurs botnet targets QNAP VioStor NVR vulnerability

Why Healthcare IoT Requires Strong Machine Identity Management

A new Zerobot variant spreads by exploiting Apache flaws

Millions of home routers on Mirai Botnet Radar

Experts hacked 28,000 unsecured printers to raise awareness of printer security issues

OpenSSH trojan campaign targets Linux systems and IoT devices

TP-Link High-Severity Flaw Added to Mirai Botnet Arsenal

Beastmode Mirai botnet now includes exploits for Totolink routers

Mozi P2P Botnet also targets Netgear, Huawei, and ZTE devices

Naming & Shaming Web Polluters: Xiongmai

5 Signs a Cyberattack Is Under Way and 5 Things You Need to Do Before It Happens

MITRE, CISA Reveal Dangerous Hardware & Software Vulnerabilities

Mirai code re-use in Gafgyt

AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits

Mukashi, the new Mirai variant that targets Zyxel NAS

Over 80,000 Hikvision cameras can be easily hacked

Machine Identities are Essential for Securing Smart Manufacturing

Over 600,000 SOHO routers were destroyed by Chalubo malware in 72 hours

Webinar on cyberattacks in Ukraine – summary and Q&A

Top 9 Cybersecurity Challenges SMEs Currently Face

The Death botnet grows targeting AVTech devices with a 2-years old exploit

2024 State of Cybersecurity: Reports of More Threats & Prioritization Issues

Thousands of Xiaomi FURRYTAIL pet feeders exposed to hack

Experts discloses dangerous flaws in robotic Dongguan Diqee 360 smart vacuums

Cyber Security Roundup for March 2021

Stay Connected