The news is filled with instances where companies inadvertently leave databases exposed on the web – even sometimes for just hours before they realise the mistake has been made.
Comparitech set up a honeypot to do some research to see if it left a fake database exposed, what would happen. Researcher Bob Diachenko left the data exposed from May 11, 2020 to May 22, 2020. During that time, 175 unauthorised requests were made. He broadly refers to these requests as “attacks”. The honeypot averaged 18 attacks per day and the first attack came on May 12, just 8 hours and 35 minutes after deployment.
Experts Comments
June 11, 2020
Finding exposed databases or devices on the internet today quite easy, as further proven by Comparitech’s honeypot research. There are specially designed search engines that look for exposed devices on the internet, and even malware like Kaiji (as one example) automatically looks for exposed operating systems with root access. For this reason, a timestamp of less than 9 hours before the first “attack” started is nothing surprising. It however shows that there is not much time for.....Read More
Like(Submit Your Expert Comments
What do you think of the topic? Do you agree with expert(s) or share your expert opinion below.Be part of our growing Information Security Expert Community (1000+), please register here.
Linkedin Message
@David Kennefick, Product Architect, provides expert commentary at @Information Security Buzz.
"Accidental exposure of databases is a lot more common than people think...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/comments-on-unsecured-databases-attacked-18-times-per-day-by-hackers
Facebook Message
@David Kennefick, Product Architect, provides expert commentary at @Information Security Buzz.
"Accidental exposure of databases is a lot more common than people think...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/comments-on-unsecured-databases-attacked-18-times-per-day-by-hackers