New IoT botnet Persirai attacks IP cameras2017-05-10 11:39 by Daniela
Tags: IoT, Persirai
A new IoT malware has been spotted in the wild. Researchers from Trend Micro have discovered the threat, dubbed Persirai. It has reportedly infected more than 100,000 Chinese-made internet-connected cameras.
The Persirai malware is infecting the cameras to form a botnet, or an army of enslaved computers. These botnets can launch DDoS attacks, which can overwhelm websites with internet traffic, forcing them offline.
"IP cameras typically use Universal Plug and Play (UPnP), which are network protocols that allow devices to open a port on the router and act like a server, making them highly visible targets for IoT malware," the researchers explained.
"After receiving commands from the server, the IP Camera will then start automatically attacking other IP Cameras by exploiting a zero-day vulnerability that was made public a few months ago," Trend Micro notes.
"Attackers exploiting this vulnerability will be able to get the password file from the user, providing them the means to do command injections regardless of password strength."
Read more -here-