Enterprise IoT Market

Report Store Mirai botnet variant takes aim at enterprise IoT Previously untargeted Enterprise IoT Market (IoT) devices are now explicitly targeted by a new variation of the famed Mirai botnet.

Smart, internet-connected gadgets that have been infected by the Mirai botnet are made into slaves that are used to launch widespread denial of service assaults (DDoS). Since its source code was originally made available online in 2016, it has given rise to a variety of versions, although up to this point they have all centered on consumer electronics.

Researchers for Palo Alto Network Unit 42 have discovered a new version that targets devices created and marketed exclusively for enterprise applications thanks to a number of new vulnerabilities. This includes commonly used WePresent WiPG-1000 Wireless Presentation systems and LG Supersign TVs. It seems logical that IoT-based botnets are evolving to target businesses, according to Lane Thames, senior security researcher at Tripwire.

"Enterprises are quickly implementing IoT technologies, such the WePresent system and the LG Supersign TV, and exposed IoT devices within business networks boost attacker motivation owing to more potential financial gains through extortion, intellectual property theft, and other means."

Download Report Now

Report Store Enterprise IoT security concerns brought to light by a variation of the Mirai botnet In particular, the two flaws affecting WePresent and the Supersign TV may be easily exploited, but what's more worrisome is that they can also be easily fixed. These two flaws are a textbook example of how a web application fails to sanitize user input, which is information that a user or attacker can manipulate while interacting with the online application. Modern programming frameworks can readily fix these two relatively simple issues.

The variation emphasizes the requirement for a much higher level of dedication to IoT security.

During their development and QA procedures, "Organisations building web-based solutions should have measures in place to detect such low hanging 'fruit' as this," he continued.

This Mirai botnet variation shows that while it is frequently believed that business solutions are more secure than their consumer counterparts, this is not always the case. IoT devices used in businesses are frequently far less secure than they should be.

Do not misunderstand me; there is no such thing as perfect security, and creating safe software is difficult. But by now, we ought to have advanced above this level of triviality.

This most recent variation is another another obstacle that experts in cybersecurity are unlikely to readily overcome.

Scale is one of our major concerns, unfortunately, as cyber defenders are up against a wall.

Numerous systems are being created and hurried to market, and this is occurring at the same time as a rising talent pool of developers and engineers that have not had any cybersecurity training and firms that do not recognize the need of safe product development.

Download Free Enterprise IoT Report

Download Report Now