Following the news about the source code for the Internet of Things (IoT) botnet ‘Mirai’ has been released. Mirai is currently one of two IoT botnets that have been menacing the internet with DDoS attacks, and the release of the source code could allow for many new attacks powered by insecure routers, IP cameras, and other easily hackable devices, IT security experts from the prpl Foundation and ESET commented below.
Art Swift, President at the prpl Foundation:
“However unfortunate, this event may hasten popular understanding of the insecurity of their personal devices as these DDoS attacks proliferate. Our Smart Home Security report shows that consumers are willing to take on more security responsibility – if only they knew how. Nobody likes being a pawn in someone else’s game, so I hope this will be an opportunity for the industry(and consumers) to take action”.
.
Mark James, Security Specialist at ESET:
“We will almost certainly see a surge in DDoS activity due to the release of this source code, if not for specific reasons than people having “a play” with the code to see what it does. The biggest problem is that by their very nature IoT devices are designed to be connected and often remotely managed. One of the biggest failures encountered in the security of these devices is not changing the default passwords used from setup. I would recommend that anyone concerned about their hardware should immediately reboot or ideally switch off that device completely and RESET their devices to factory settings, then immediately change the default password if not already done so.”
About the Author
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.
