The Latest Threat To IoT: What You Need To Know About Brickerbot
Submitted by Lindsey O'Donnell on
Method Of Compromising Devices
Over a four-day period, Radware recorded 1,895 permanent denial-of-service attempts performed around several locations globally. The company recorded attempts from one short-lived bot, and then a second bot on the same date, at less than one hour apart, with lower intensity but more thorough. The Brickerbot attack used the same exploit vector used by Mirai attacks – Telnet brute force – to breach IoT devices.
Once it has successfully accessed the IoT device, Brickerbot performs a series of Linux commands that lead to corrupted storage, followed by commands that disrupt the device's internet connectivity and performance and wipes off all the files on the device.
"They are definitely targeting Internet of Things devices, such as IP cameras and DVRs," Pascal Geenens, cyber security evangelist at Radware, told CRN.