Linux/IRCTelnet: New Strain Of Malware

By   ISBuzz Team
Writer , Information Security Buzz | Nov 04, 2016 02:23 pm PST

Newly reported ‘Linux/IRCTelnet’ malware? allows hackers to transform vulnerable IoT devices into slaves for DDos attacks. (Researchers this week posted an analysis on the Malware must die blog). Mike Pittenger, Vice President of Security Strategy at Black Duck Software commented below.

Mike Pittenger, Vice President of Security Strategy at Black Duck Software:

Mike Pittenger“The issue is not a vulnerability (per se) in these devices, but an architectural flaw in that they don’t require the default password to be changed, and passwords can be bypassed using Telnet.  As I recently blogged (“Warning to The Internet of Things – Send Lawyers, Gun & Money“) Unsecure IoT devices are putting the Internet, and those services that depend on a reliable communication channel, at risk.  A reasonable company, to use the due care standard, would not build and sell a car without brakes. At what point are companies that put our infrastructure at risk held accountable? I think we’re going to see that happen soon.”

1 Expert Comment
Newest
Oldest Most Voted
Inline Feedbacks
View all comments

Recent Posts