2015, DDOS and Firmware - Cyber Security Informer

New Ttint IoT botnet exploits two zero-days in Tenda routers

Security Affairs

OCTOBER 5, 2020

Unlike other IoT DDoS botnets, Ttint implements 12 remote access functions such as Socket5 proxy for router devices, tampering with router firewall and DNS settings, executing remote custom system commands. According to the experts, Tenda routers running a firmware version between AC9 to AC18 are vulnerable to the attack.

IoT

IoT Firmware DNS Advertising

Both Mirai and Hoaxcalls IoT botnets target Symantec Web Gateways

Security Affairs

MAY 19, 2020

which is a product that became end-of-life (EOL) in 2015 and end-of-support-life (EOSL) in 2019.” “There is no evidence to support any other firmware versions are vulnerable at this point in time and these findings have been shared with Symantec.” ” reads the analysis published by Palo Alto Networks.

IoT

IoT DDOS Authentication Advertising

Attackers are hacking NSC Linear eMerge E3 building access systems to launch DDoS attacks

Security Affairs

FEBRUARY 3, 2020

Researchers from SonicWall revealed that hackers are attempting to compromise Linear eMerge E3 smart building access systems to recruit them in a DDoS botnet. CVE-2019-7256 is actively being exploited by DDoS botnet operators. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. 06 and older.

DDOS

DDOS Hacking Internet Internet

Mukashi, the new Mirai variant that targets Zyxel NAS

Security Affairs

MARCH 21, 2020

Multiple, if not all, Zyxel NAS products running firmware versions up to 5.21 The bot supports various commands, like Mirai, such as launching DDoS attacks. Like other Mirai variants, Mukashi is also capable of receiving C2 commands and launching DDoS attacks.” The vendor advisory is also available. to the console. .

DDOS

DDOS Authentication Advertising Firmware

Mozi Botnet is responsible for most of the IoT Traffic

Security Affairs

SEPTEMBER 20, 2020

According to the researchers, in the last months of 2019, the botnet was mainly involved in DDoS attacks. The botnet supports the following capabilities: DDoS attack Collecting Bot Information Execute the payload of the specified URL Update the sample from the specified URL Execute system or custom commands. Pierluigi Paganini.

IoT

IoT DDOS Architecture Passwords

Experts hacked 28,000 unsecured printers to raise awareness of printer security issues

Security Affairs

AUGUST 27, 2020

Example of available open printers on a single IoT search engine (Shodan.io): As we can see, many users and organizations still use internet-connected devices without thinking about security, installing firmware updates, or taking into account the implications of leaving their devices publicly accessible. Change the default password.

Hacking

Hacking IoT Firmware Internet

Million of Telestar Digital GmbH IoT radio devices can be remotely hacked

Security Affairs

SEPTEMBER 10, 2019

The hardware of the terminals is equipped with Shenzen technology, while the firmware is based on BusyBox Linux Debian. . According to Kunz, more than one million devices are potentially at risk, an attacker can trigger the flaws to build a huge botnet that could be used to launch powerful DDoS attacks. ” continues the experts.

IoT

IoT Hacking Firmware Advertising

Roughly 500,000 Ubiquiti devices may be affected by flaw already exploited in the wild

Security Affairs

FEBRUARY 4, 2019

Ubiquiti is aware of the issue and is currently working on a firmware update that will address it anyway it is trying to downplay it. “To our current knowledge, this issue cannot be used to gain control of network devices or to create a DDoS attack.” ” reads the advisory published by Ubiquit. Pierluigi Paganini.

DDOS

DDOS Advertising Firmware Hacking

NCSC warns of a surge in ransomware attacks on education institutions

Security Affairs

SEPTEMBER 20, 2020

Recently Check Point researchers warned of a surge in the DDoS attacks against education institutions and the academic industry across the world. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Education

Education Ransomware Antivirus Backups

Roughly 500,000 Ubiquity devices may be affected by flaw already exploited in the wild

Security Affairs

FEBRUARY 4, 2019

Ubiquity is aware of the issue and is currently working on a firmware update that will address it anyway it is trying to downplay it. “To our current knowledge, this issue cannot be used to gain control of network devices or to create a DDoS attack.” ” reads the advisory published by Ubiquity. Pierluigi Paganini.

DDOS

DDOS Advertising Firmware Internet

Thousands of Xiaomi FURRYTAIL pet feeders exposed to hack

Security Affairs

OCTOBER 30, 2019

A Russian security researcher accidentally discovered API and firmware issues that allowed her to take over all Xiaomi FurryTail pet feeders. The Russian security researcher Anna Prosvetova, from Saint Petersburg, has accidentally discovered API and firmware issues that allowed her to take over all Xiaomi FurryTail pet feeders.

Hacking

Hacking Firmware Advertising DDOS

QSnatch malware already infected thousands of QNAP NAS devices

Security Affairs

NOVEMBER 4, 2019

“The original infection method remains unknown, but during that phase malicious code is injected to the firmware of the target system, and the code is then run as part of normal operations within the device. DDoS attack, cryptocurrency miner, data harvesting). ” reads the report. After this the device has been compromised.

Malware

Malware Firmware Advertising Encryption

AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits

CyberSecurity Insiders

NOVEMBER 11, 2021

It also has different DDoS functionality. CVE-2015-2051. Ax with firmware 1.04b12 and earlier. NETGEAR DGN2200 devices with firmware through 10.0.0.50. Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.2, Affected products include: NAS326 before firmware V5.21(AAZF.7)C0

Malware

Malware IoT Firmware Authentication

Experts discloses dangerous flaws in robotic Dongguan Diqee 360 smart vacuums

Security Affairs

JULY 20, 2018

“Like any other IoT device, these robot vacuum cleaners could be marshalled into a botnet for DDoS attacks, but that’s not even the worst-case scenario, at least for owners. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Firmware

Firmware Surveillance Technology Authentication

IoT Cybersecurity: 5 Major Vulnerabilities and How to Tackle Them

Security Affairs

OCTOBER 13, 2020

Nobody told them that their coffee machine could be hacked into or that their camera could be used to launch a DDoS attack. Even if a local network is completely secured and all IoT devices on it have firmware and software updated to the last version, a shadow IoT device can wreak havoc. Shadow IoT Devices. Pierluigi Paganini.

IoT

IoT Cybersecurity Manufacturing Internet

The Internet of Things: Security Risks Concerns

Spinone

MARCH 17, 2018

billion “things” connected to the Internet , a 30% increase from 2015. The biggest ever DDoS attack was recently carried out using over 150,000 hacked smart devices worldwide including cameras, printers, and fridges. In 2020, this number is expected to grow to a staggering 20.8

Internet

Internet Internet Risk Computers and Electronics

Reassessing cyberwarfare. Lessons learned in 2022

SecureList

DECEMBER 14, 2022

Of course, we should note that the opposite is also possible: for instance, starting in June 2016, but most notably since September 2016 all the way to December 2016, the Turla group intensified their satellite-based C&C registrations tenfold compared to its 2015 average.

DDOS

DDOS Ransomware Government Energy and Utilities

APT trends report Q1 2022

SecureList

APRIL 27, 2022

Subsequently, DDoS attacks hit several government websites. In December we were made aware of a UEFI firmware-level compromise through logs from our firmware scanning technology. These changes allowed the attackers to intercept the original flow of the firmware code and have it executed alongside a sophisticated infection chain.

Malware

Malware Firmware Government Phishing

The Death botnet grows targeting AVTech devices with a 2-years old exploit

Security Affairs

JULY 25, 2018

EliteLands is using a 2-years old exploit that could be used to trigger tens of well-known vulnerabilities in the AVTech firmware. Many products of the vendor currently run the vulnerable firmware, including DVRs, NVRs, and IP cameras. “The Death botnet purpose was orginally just to ddos but I have a greater plan on it soon.

Firmware

Firmware Passwords IoT Advertising

Cyber Security Informer

New Ttint IoT botnet exploits two zero-days in Tenda routers

Both Mirai and Hoaxcalls IoT botnets target Symantec Web Gateways

Trending Sources

Attackers are hacking NSC Linear eMerge E3 building access systems to launch DDoS attacks

Mukashi, the new Mirai variant that targets Zyxel NAS

Mozi Botnet is responsible for most of the IoT Traffic

Experts hacked 28,000 unsecured printers to raise awareness of printer security issues

Million of Telestar Digital GmbH IoT radio devices can be remotely hacked

Roughly 500,000 Ubiquiti devices may be affected by flaw already exploited in the wild

NCSC warns of a surge in ransomware attacks on education institutions

Roughly 500,000 Ubiquity devices may be affected by flaw already exploited in the wild

Thousands of Xiaomi FURRYTAIL pet feeders exposed to hack

QSnatch malware already infected thousands of QNAP NAS devices

AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits

Experts discloses dangerous flaws in robotic Dongguan Diqee 360 smart vacuums

IoT Cybersecurity: 5 Major Vulnerabilities and How to Tackle Them

Top SD-WAN Solutions for Enterprise Security

The Internet of Things: Security Risks Concerns

Reassessing cyberwarfare. Lessons learned in 2022

APT trends report Q1 2022

The Death botnet grows targeting AVTech devices with a 2-years old exploit

Stay Connected