Security News Another IoT botnet has been found feasting on vulnerable IP cameras

Solarquest

Moderator
Thread author
Verified
Staff Member
Malware Hunter
Well-known
Jul 22, 2014
2,525
Children, please welcome Persirai to the class

Researchers have discovered yet another IoT botnet.

Persirai targets more than a thousand different internet protocol camera models. Researchers at Trend Micro warn that 120,000 web-connected cameras are vulnerable to the malware.

Consumers would, in most cases, be unaware that their devices are even exposed to the internet much less at risk of compromise. Hackers are using a known but seldom patched vulnerability to hack the cameras.
persirai_malware.jpg

Persirai malware infection flow [Source: Trend Micro bog post]

The development of Persirai comes just weeks after the arrival of Hajime – the "vigilante" IoT worm that blocks rival botnets – and months after the infamous Mirai IoT botnet. Mirai was used to attack a key internet domain resolution hub last October, leaving scores of high-profile websites unreachable to millions.

Unlike its relatives, Persirai sticks to IP cameras rather than also going after internet-connected digital video recorders, routers, and other vulnerable IoT devices. The targeting might be down, at least in part, to how easy IP cameras are to hack.

"IP cameras typically use Universal Plug and Play (UPnP)... making them highly visible targets for IoT malware," Trend Micro researchers Tim Yeh, Dove Chiu and Kenney Lu note.
 

Winter Soldier

Level 25
Verified
Top Poster
Well-known
Feb 13, 2017
1,486
Surely the fact that about a year ago, the source code of Mirai has been made public (on a forum), does not improve the situation...
Then the IoT sector suffers from a lack of real security protocols and criminals act without any issues.
 
  • Like
Reactions: _CyberGhosT_

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top