iOT attacks explained

As our devices become more and more connected to the internet, the attacks on these devices are becoming more common.  Any device connected to your home network is potentially vulnerable and could become a target of an attack.  Being aware and educated about our risks and vulnerabilities is very important to our online security.  Read below to learn about attacks on iOT devices and tips on how to secure them.

 

 

1 - INITIAL ACCESS

The attacker scans the network to locate a vulnerable device with an open port.  In simple terms, they scan your entire network and look for anything which isn't secured.  The attacker then obtains the IP address of the device.

 

2 - EXECUTION

Next, a command is executed into the vulnerable device by using either exploits or brute forcing which means they install software on your device which can be used by them as a gateway into your network.  

 

3 - PERSISTENCE

The executed malware stays on the device which means it stays on the device and can be used at anytime in the future.

 

4 - EVASION

Most devices have simple checks they use to ensure everything is running normally.   The malicious software placed on the device masquerades itself as part of the device's operating system which means it can't be detected.

 

5 - INFORMATION COLLECTION

During this stage, all information stored in the device is collected. This includes sensitive files including the security keys and network data.   An advanced persistent threat (APT) infecting network routers and storage devices for instance, collects sensitive data from the network traffic found in compromised devices.

 

6 - COMMAND & CONTROL

The malware continues to launch different malicious activities which can do everything from affect your internet speed by using your network to launch other attacks or constantly monitor your network for sensitive passwords, logins or personal data.

 

7 - LATERAL MOVEMENT

After compromising the first device, the attacker uses lateral movement techniques to access other vulnerable devices in the network and continues to compromise them one by one. For example, if a router is first infected, the malware can continue to infect all the other devices that are connected to it. 

 

8 - IMPACT

Malicious activities launched in the IoT device have multiple impacts on the device: encryption of data for a ransom, total wipe out of disk and data, and abuse for coin mining. By "bricking" an IoT device, malicious malware corrupts its storage capability or completely reconfigures its kernel parameters.

 

So how would you stop something like this from happening?

1 - Disconnect or turn off any devices which aren't used frequently  If you only use your smart speaker once a month for example, turn it off so it's not connected to your network.   

2 - Check and update your devices.   A quick check of the manufacturer's website will give you instructions and guidance.

3 - Scan your network with your cyber app - Your cyber app identifies your connected devices and creates tailored security tasks for you for each device.

4 - Use a guest WiFi for smart devices(if possible) - A guest WiFi network is a great way to keep your Iot devices functioning but separate from your main WiFi.  

5 - Turn off any unused functionality - Our smart devices have a lot of capabilities and you will usually have the option of turning off certain features.  Check the manufacturer's website for instructions for each device and how to change it.

 

We don't always think of our smart devices being attacked or targeted and securing them is relatively simple.  Use the tips above to harden the security level of your home network.   Remember to contact us immediately if you experience a cyber attack.