Hackers Make the First-Ever Ransomware for Smart Thermostats

[Jack]

One day, your thermostat will get hacked by some cyber criminal hundreds of miles away who will lock it with malware and demand a ransom to get it back to normal, leaving you literally in the cold until you pay up a few hundred dollars.

This has been a scenario that security experts have touted as one of the theoretical dangers of the rise of the Internet of Things, internet-connected devices that are often insecure. On Saturday, what sounds like a Mr. Robot plot line came one step closer to being reality, when two white hat hackers showed off the first-ever ransomware that works against a “smart” device, in this case a thermostat.

Luckily, Andrew Tierney and Ken Munro, the two security researchers who created the ransomware, actually have no ill intention. They just wanted to make a point: some Internet of Things devices fail to take simple security precautions, leaving users in danger.

Read more: Hackers Make the First-Ever Ransomware for Smart Thermostats

 

[DardiM]

Thanks for the share

Anticipation - imagine the situation in near future :
"My robot vacuum cleaner got hacked and refuses to clean my apartment ...
I'm sure I will pay the ransom as I do not know anymore how to use a broom or vacuum"

 

[LabZero]

My point of view.

- This means that we are condemned? No
- People should wait to buy IoT devices? I don't think.
- Users should pay attention when buying devices and connecting them to the Internet? Yes, of course.
- Users should use strong passwords and be sure to update the software on their different devices? Yes absolutely.!!!

 

[Cohen]

Thanks for sharing this.
The majority of people wouldn't think about their thermostat's security (I know I've never thought about the security of a thermostat before this); this just shows how much more people are going to have to be aware of security in the future as more things are controlled by the Internet and are exposed to security risks.

 

[hjlbx]

I think with IoT interconnected devices, the days of simply buying a device, charging it, and using it will have to change.

What I mean by that statement is that consumers are going to have to become more security conscious and aware of their habits.

However, anyone here knows that the typical user will NEVER adhere to best practices - EVER !

They will be content - and think - with buying and using IoT security soft that they are safe.

Silly rabbits...

This is just the beginning of a trend.

PS - I also think a lot of the blame is due to the way general networking\device interconnectivity is implemented. Networking is terribly vulnerable - and has never really been addressed. It's one of those things that never will be addressed by the industry - because to fix it would be a massive, insanely expensive endeavor. Any fundamental changes would affect too many things - softs, infrastructure, etc.

 

[FrankS]

By using typical devices without access to the internet at home I can eat and cook every day in my heated house. Only watching TV could be at risk. Because it's connected to my network through wireless lan. Maybe - at watching football or Formula 1 - I will someday get a surprise by ransomware..."pay 1000€ or you'll never see Sebastian Vettel again"
Cars are connected to the internet by using internet sim-cards too. I don't need it really.

 

[jamescv7]

Protection should expand not only on those common systems since IoT is considered the next platform for the rapid technology base.

Security is somewhat the problem until now because of limited range of solution.