According to the Kaspersky Lab IoT report, in the first half of 2018, IoT devices were attacked with more than 120,000 modifications of malware. That’s more than triple the amount of IoT malware seen in the whole of 2017.

 

Kaspersky Lab warns that the snowballing growth of malware families for smart devices is a continuation of a dangerous trend: 2017 also saw the number of smart device malware modifications rise to 10 times the amount seen in 2016.

 

The market for IoT devices (also known as “smart” gadgets), and their role in everyday life, is growing exponentially. But cybercriminals are seeing the financial opportunities too, and are multiplying and differentiating their attacks as a result.

 

The danger for consumers who love their IoT gadgets, is that threats can strike unexpectedly, turning seemingly harmless devices into powerful machines for illegal activity. This can include malicious cryptocurrency mining, DDoS attacks, or the discreet inclusion of devices in botnet activities.

 

Aware of these dangers, Kaspersky Lab experts regularly review the data collected from various sources including our honeypots – decoy devices used to attract the attention of cybercriminals and analyze their activities.

 

The latest updates are striking: during the first half of 2018, the number of malware modifications aimed at IoT devices registered by researchers was more than three times higher than the number registered in the whole of 2017.

 


 

The statistics show that the most popular method of IoT malware propagation is still the brute forcing of passwords or repetitive attempts at various password combinations. Brute forcing was used in 93% of detected attacks. In most of the remaining cases, access to an IoT device was gained using well-known exploits.

 

The devices most often attacking Kaspersky Lab honeypots were routers (by a large margin). 60% of the registered attempts to attack our virtual devices were coming from them. The remaining share of compromised IoT gadgets included a variety of different technologies, such as DVR-devices and printers. The honeypots even registered an attack coming from 33 washing machines.

 

Different cybercriminals may have different reasons to exploit IoT, but the most popular goal is to facilitate DDoS-attacks by creating botnets. Some malware modifications are also tailored to turn off competing malware, fix its own vulnerabilities and shutdown vulnerable services on the device.

 

Compared to personal computers and smartphones, IoT devices might not seem powerful enough to attract cybercriminals and be used in their illegal activity. However, their lack of performance is more than outweighed by their number, and the fact that some smart gadget manufacturers are still not paying enough attention to the security of their products. Even if vendors begin to provide their devices with better security now, it will be a while before old vulnerable devices have been phased out of our homes. In addition, IoT malware families are customizing and developing very fast, and while previously exploited breaches have not been fixed, criminals are constantly discovering new ones. IoT products have therefore become an easy target for cybercriminals who can turn simple machines into a powerful device for illegal activity, such as spying, stealing and blackmailing,” says Mikhail Kuzin, Security Researcher at Kaspersky Lab.

 

To reduce the risk of infection, users are advised to:

  • Install updates for the firmware you use as soon as possible. Once a vulnerability is found, it can be fixed through patches within updates.
  • Always change preinstalled passwords. Use complicated passwords that include both capital and lower case letters, numbers and symbols.
  • Use Kaspersky Smart Home and IoT Scanner to check your IoT devices for vulnerabilities and infections.
  • Reboot a device as soon as you think it’s acting strangely. It might help get rid of existing malware, but this doesn’t reduce the risk of getting another infection.

 

Read the full version on Securelist.com.


RECOMMENDED ARTICLE FOR TECHWORLD


 
The Rise of Thingbots in the Philippines
Techworld Date Posted: 26 October 2017 1:06 PM | 394 Views
Thingbots, botnets built exclusively from IoT devices, are set to become the infrastructure for a future darknet. This is one of the key findings of F5 Networks’s latest report,. See More
 
The Rise of Thingbots in the Philippines
Techworld Date Posted: 1:06 PM | 394 Views
Thingbots, botnets built exclusively from IoT devices, are set to become the infrastructure for a future darknet. This is one of the key findings of F5 Networks’s latest report,See More

 
SAP Launches Youth Enablement Program in Southeast Asia
Techworld Date Posted: 16 September 2017 9:43 AM | 194 Views
SAP SE (NYSE: SAP) today announces the launch of its flagship program for young talents, SAP's Young Professional Program (YPP), in Southeast Asia. Developed by the SAP Training and Development Institute (SAP TDI), this.... See More
 
SAP Launches Youth Enablement Program in Southeast Asia
Techworld Date Posted: 9:43 AM | 194 Views
SAP SE (NYSE: SAP) today announces the launch of its flagship program for young talents, SAP's Young Professional Program (YPP), in Southeast Asia. Developed by the SAP Training and Development Institute (SAP TDI), this...See More

 
Nokia 7 plus Is Now Out in Philippine Market
Techworld Date Posted: 3 May 2018 3:55 PM | 243 Views
HMD, the home of Nokia phones, is happy to bring you the latest news everyone has been waiting for. The flagship hero without the flagship price tag, the Nokia 7 plus, is now officially.... See More
 
Nokia 7 plus Is Now Out in Philippine Market
Techworld Date Posted: 3:55 PM | 243 Views
HMD, the home of Nokia phones, is happy to bring you the latest news everyone has been waiting for. The flagship hero without the flagship price tag, the Nokia 7 plus, is now officially...See More

 
Snake Oil: In Q2 Spammers Cashed in on WannaCry Epidemics to Promote Fraudulent Services for Protection against the Notorious Ransomware Attack
Techworld Date Posted: 4 September 2017 3:30 PM | 200 Views
In Q2 2017, cybercriminals involved in spam distribution tried to capitalize on public fears when the WannaCry ransomware epidemic struck in May. Knowing that there are lots of people out there infected with this.... See More
 
Snake Oil: In Q2 Spammers Cashed in on WannaCry Epidemics to Promote Fraudulent Services for Protection against the Notorious Ransomware Attack
Techworld Date Posted: 3:30 PM | 200 Views
In Q2 2017, cybercriminals involved in spam distribution tried to capitalize on public fears when the WannaCry ransomware epidemic struck in May. Knowing that there are lots of people out there infected with this...See More

 
Transcend Announces New MSA450T mSATA 3D TLC SSD for Embedded Applications
Techworld Date Posted: 28 April 2018 4:47 PM | 237 Views
Transcend Information, Inc. (Transcend), a leading manufacturer of storage and multimedia products, is proud to announce the release of the MSA450T industrial solid-state drive equipped with 3D TLC NAND flash memory. The MSA450T comes.... See More
 
Transcend Announces New MSA450T mSATA 3D TLC SSD for Embedded Applications
Techworld Date Posted: 4:47 PM | 237 Views
Transcend Information, Inc. (Transcend), a leading manufacturer of storage and multimedia products, is proud to announce the release of the MSA450T industrial solid-state drive equipped with 3D TLC NAND flash memory. The MSA450T comes...See More

 
Tech4ED Named as Finalist in IDC Smart City Asia Pacific Awards (SCAPA) 2017
Techworld Date Posted: 20 June 2017 2:32 PM | 250 Views
MANILA – IDC Government Insights Asia Pacific announced today that Tech4ED has been chosen as one of the finalists in the annual IDC Smart City Asia Pacific Awards (SCAPA) 2017 under the category of.... See More
 
Tech4ED Named as Finalist in IDC Smart City Asia Pacific Awards (SCAPA) 2017
Techworld Date Posted: 2:32 PM | 250 Views
MANILA – IDC Government Insights Asia Pacific announced today that Tech4ED has been chosen as one of the finalists in the annual IDC Smart City Asia Pacific Awards (SCAPA) 2017 under the category of...See More

 
NMW2017: Kaspersky Lab and AVL Software and Functions GmbH Pave the Way for Secure-by-Design Connected Cars
Techworld Date Posted: 18 September 2017 9:27 AM | 157 Views
In response to the rising cybersecurity challenges facing the connected and autonomous car industry, Kaspersky Lab and AVL Software and Functions GmbH have unveiled the Secure Communication Unit (SCU) at New Mobility World /.... See More
 
NMW2017: Kaspersky Lab and AVL Software and Functions GmbH Pave the Way for Secure-by-Design Connected Cars
Techworld Date Posted: 9:27 AM | 157 Views
In response to the rising cybersecurity challenges facing the connected and autonomous car industry, Kaspersky Lab and AVL Software and Functions GmbH have unveiled the Secure Communication Unit (SCU) at New Mobility World /...See More

 
Kaspersky Lab and iSecure Networks Give Away P280k in Photo Story Contest
Techworld Date Posted: 14 October 2017 2:16 PM | 145 Views
Manila, Philippines – Be among the twelve lucky winners of a total of P280,000 worth of cash prizes tax-free just by securing your devices against cyberattacks with Kaspersky Lab and iSecure Network’s photo story.... See More
 
Kaspersky Lab and iSecure Networks Give Away P280k in Photo Story Contest
Techworld Date Posted: 2:16 PM | 145 Views
Manila, Philippines – Be among the twelve lucky winners of a total of P280,000 worth of cash prizes tax-free just by securing your devices against cyberattacks with Kaspersky Lab and iSecure Network’s photo story...See More

 
Protect Scattered Data in Physical, Virtual, and Cloud Workloads with the Active Backup Suite
Techworld Date Posted: 29 June 2018 4:21 PM | 181 Views
Synology today announced the official release of two major backup applications in Active Backup suite of packages, the official version of Active Backup for Office 365 that supports SaaS cloud backup, and the beta.... See More
 
Protect Scattered Data in Physical, Virtual, and Cloud Workloads with the Active Backup Suite
Techworld Date Posted: 4:21 PM | 181 Views
Synology today announced the official release of two major backup applications in Active Backup suite of packages, the official version of Active Backup for Office 365 that supports SaaS cloud backup, and the beta...See More

 
ViewSonic to Showcase Professional Monitors as the Priority Brand at Canon Photomarathon Philippines 2017
Techworld Date Posted: 17 October 2017 3:12 PM | 269 Views
Manila, Philippines- ViewSonic Corp., a leading global provider of visual solution products, will join the Canon Photomarathon Philippines 2017 on the 21st of October as the priority professional monitor brand.. See More
 
ViewSonic to Showcase Professional Monitors as the Priority Brand at Canon Photomarathon Philippines 2017
Techworld Date Posted: 3:12 PM | 269 Views
Manila, Philippines- ViewSonic Corp., a leading global provider of visual solution products, will join the Canon Photomarathon Philippines 2017 on the 21st of October as the priority professional monitor brand.See More


Power by

Download Free AZ | Free Wordpress Themes