So the Criminal hackers have to get more sophisticated as some networks are patching their devices.
You must have heard of the Casino that got breached through a thermometer in the fish tank? We get excited with new capabilities of Internet connectivity. But unfortunately we forget that a Cybersecurity weak device can open doors for criminal hackers. You have a firewall right? It defeats the easy entry of a hacker.
But what if the hacker is already in your network? How? Somehow they were able to make the connection…
“Wicked Botnet uses passel of exploits to target IoT”by Threatpost.com has an interesting paragraph:
“It scans ports 8080, 8443, 80 and 81 by initiating a raw socket SYN connection; if a connection is established, it will attempt to exploit the device and download its payload,” explained researchers Rommel Joven and Kenny Yang, in the analysis. “It does this by writing the exploit strings to the socket. The exploit to be used depends on the specific port the bot was able to connect to.”
Since other previous malware has already infected the easy to infect routers, the botnets now have to infect using exploit tactics. This is typical of old and new tactics as the cybersecurity landscape changes quickly.
This new botnet is called “Wicked Botnet uses passel of exploits to target IoT” and scans for ports 80,81,8443, and 8080.
Unfortunately there are cloud based problems as well:
Nolacon2018 had Sean Metcalf discuss this very issue
There is a specific issue Sean is concerned about
because every 2 minutes password synchronization has to occur for Azure cloud, thus an attacker can capture the stored password hash, and then try to guess it at their leisure.
The reality is the hacker will always try to use the technologies that you use to outfox and steal your money, data, and anything else they can.
In some ways it is always a losing game – a catch-up if you will. We have to defend everything, and all the criminals have to do is to attack and succeed in one spot.
So we have to do the proper risk management analysis to figure out where to put most of our time and resources.
Contact us to discuss.