web analytics

Telnet Credential Leak Reinforces Bleak State of IoT Security

by Michael Mimoso

 

Shortly after the Mirai attacks, Johannes Ullrich of the SANS Internet Storm Center (ISC) decided to try a little experiment. He put a security camera DVR online—a poorly secured one with default credentials—and observed how long it would take to become infected, and how often.

He wasn’t disappointed. Ullrich said last October that by the minute, bots were hitting the DVR’s IP with telnet attempts, eventually overwhelming the server to the point it had to be constantly rebooted. Not all the attacks worked, Ullrich said, but a few times an hour, one of the bots would get in with the correct credential.

 

full article here:

Take a look at the best antivirus, anti-malware, anti-spy, etc. software

Powered by WPeMatico