It sounds like a sci-fi movie. Over 5,eroticism marijuana000 connected devices, including light bulbs and vending machines, were hacked to slow internet service at a university to a crawl.
Poorly secured internet of things (IoT) devices have become gold mines for hackers looking to launch DDoS attacks to take websites and services offline. But this latest case, detailed in Verizon's Data Breach Digest 2017, is the rare example of gadgets attacking their own network.
SEE ALSO: Your smart fridge is about to make our IoT security nightmare so much worseThe devices were making hundreds of Domain Name Service (DNS) lookups every 15 minutes, causing the university's network connectivity to become unbearably slow or even inaccessible.
Weirdly enough, the majority of the searches "showed an abnormal number of sub-domains related to seafood," the report said.
Here's an abstract from the Digest'ssneak peek:
The firewall analysis identified over 5,000 discrete systems making hundreds of DNS lookups every 15 minutes. Of these, nearly all systems were found to be living on the segment of the network dedicated to our IoT infrastructure.
With a massive campus to monitor and manage, everything from light bulbs to vending machines had been connected to the network for ease of management and improved efficiencies.
While these IoT systems were supposed to be isolated from the rest of the network, it was clear that they were all configured to use DNS servers in a different subnet.
It's very unlikely, to use an understatement, that thousands of students at the university had a sudden and simultaneous urge to eat seafood.
Instead, what did happen was that cheeky hackers instructed the IoT devices to make DNS lookups related to seafood every 15 minutes.
Here's what Verizon's RISK (Research, Investigations, Solutions and Knowledge) team told the university after they were summoned to investigate the attack:
The RISK Team had provided me with a report detailing known indicators found in the firewall and DNS logs that I had sent over earlier. Of the thousands of domains requested, only 15 distinct IP addresses were returned. Four of these IP addresses and close to 100 of the domains appeared in recent indicator lists for an emergent IoT botnet.
So here's the case of vending machines and lamp posts compulsively searching for seafood and overwhelming the network with requests with the aim of taking it down.
If this isn't creepy/dystopian/fascinating, we don't know what is.
Luckily for the guys at the university, there was no need to replace "every soda machine and lamp post".
The Verizon's RISK team explained that the botnet "spread from device to device by brute forcing default and weak passwords".
To solve the massive hack, the university intercepted a clear-text malware password for a compromised IoT device and then used "that information to perform a password change before the next malware update".
Easy, right?
Overall, it doesn't look like this problem is going away anytime soon. There are more than 6 billion IoT devices currently running, according to Gartner Research. That number could reach more than 20 billion by 2020.
Topics Cybersecurity
AT&T names Atlanta, Dallas among first cities to receive mobile 5GGoogle Chrome update fixes linkTurn your smartphone camera into a microscope with this 3DStormzy fires furious freestyle against UK Prime Minister Theresa MayHow Danai GuriraOkoye redefines the female warrior in 'Black Panther'Apple will probably launch two new iPads soonNew York Times ad names every Congressman who's received NRA fundingDepartment of Justice announces new cybersecurity task forceBigelow's inflatable space capsules may replace the Space StationAirbnb introduces Airbnb Plus and new 'luxury' services for travelersPorgs are sped up chickens, and other 'Star Wars' sound design secretsWelp, Steven Seagal is endorsing a cryptocurrency called 'Bitcoiin'The discovery of alien life may be viewed as exciting and positive'Black Panther' director Ryan Coogler tweets heartfelt note to fansHow to spot a bot and what to do about itWelp, Steven Seagal is endorsing a cryptocurrency called 'Bitcoiin'Avocado wedding proposals have to be a sign of the apocalypseGoogle Chrome update fixes link'Black Panther' director Ryan Coogler tweets heartfelt note to fansFox News will launch a dedicated streaming service called 'Fox Nation' Stephen Fry shuts down Donald Trump with the most British insult ever Beyoncé fans are still in shock after that Grammys result Donald Trump didn't tweet this morning and it freaked people out 11 people and things to celebrate on Valentine's Day besides a significant other Brits are a bunch of Netflix cheaters and they're not even sorry Donald Trump's inauguration poster has an embarrassing typo Siri has some fresh thoughts on love just in time for Valentine's Day News captions mixed up with a porn documentary make for pretty funny screengrabs Why Google's Valentine's Day game is a lot darker than you think Marine biologist claps back at that Facebook user's hilarious sunfish rant Films to watch on Valentine's Day if you're a total cold Gift your Valentine their true heart's desire with a fried chicken bouquet Bruno Mars' tribute to Prince at the Grammys was great Dyson is quietly working artificial intelligence into all of its home gadgets Major League Soccer team seeks 'chief tattoo officer' From Ian to Helene to Milton: Extreme weather is anything but 'natural' 6 gods of love for the modern era A Tribe Called Quest brought raw political fire to the Grammys stage Chrissy Teigen and John Legend had a bit of 'toilet trouble' after the Grammys The internet Photoshops the crap out of Justin Trudeau staring at Trump's hand
0.8166s , 8289.0234375 kb
Copyright © 2025 Powered by 【eroticism marijuana】,Creation Information Network