{"id":6210,"date":"2016-10-26T13:51:55","date_gmt":"2016-10-26T13:51:55","guid":{"rendered":"https:\/\/kasperskydaily.com\/b2b\/?p=6210"},"modified":"2022-04-26T16:47:40","modified_gmt":"2022-04-26T14:47:40","slug":"iot-ddos","status":"publish","type":"post","link":"https:\/\/www.kaspersky.co.za\/blog\/iot-ddos\/6210\/","title":{"rendered":"IoT: You become responsible for what you have\u00a0deployed"},"content":{"rendered":"

Last week saw a massive DDoS attack<\/a> aimed at Dyn, a major DNS provider. The attack disrupted a great many network services of global importance including Twitter, Netflix, Spotify, Airbnb, Reddit, Etsy, and SoundCloud. But perhaps the most interesting thing about this attack was that it used the Internet of Things (IoT).<\/p>\n

The problem is twofold: Connected devices are currently inherently vulnerable, and their owners take a lax approach to cybersecurity.<\/p>\n

#IoT: You become responsible for what you have deployed. #Mirai #DDoS<\/p>Tweet<\/a><\/blockquote>\n

To sum up the attack: Mirai<\/a> malware infected the firmware of IoT devices, made the devices into a botnet, and used the botnet in a distributed-denial-of-service (DDoS) attack that took down Dyn. The malicious technique was not sophisticated at all; the criminals exploited default passwords and logins, which are hardly top secret. In other words, this method works on devices that use common defaults that cannot be changed manually and those whose owners never bothered to reconfigure default settings.<\/p>\n

The former problem is the fault of manufacturers. The latter rests with owners.<\/p>\n

Mirai surely co-opted the IoT devices of home and corporate users alike. Although we can\u2019t necessarily influence the former, we will say that corporate IoT users really must secure their devices. Ensuring IoT security is a big-picture move: If we all change the default passwords of IoT devices, attackers will find their botnets greatly diminished. File that under basic social responsibility.<\/p>\n

Don\u2019t call it hindsight, though: After Mirai\u2019s infection of IoT devices, we will<\/em> see spyware authors taking advantage of the same method.<\/p>\n

Our recommendations:<\/p>\n