For 8 years, a hacker operated a massive IoT botnet just to download Anime videos

guest · May 9, 2020

For 8 years, a hacker operated a massive IoT botnet just to download Anime videos
The botnet consisted solely of D-Link NAS and NVR devices
May 7, 2020
https://www.zdnet.com/article/for-8...ive-iot-botnet-just-to-download-anime-videos/

For almost eight years, a hacker has silently hijacked D-Link NVRs (network video recorders) and NAS (network-attached storage) devices into a botnet that had the sole purpose of connecting to online websites and download anime videos.

Named Cereals and first spotted in 2012, the botnet reached its peak in 2015 when it amassed more than 10,000 bots.
However, despite its size, the botnet operated without detection from most cyber-security firms. Currently, Cereals is slowly disappearing, as the vulnerable D-Link devices on which it fed all these years have started aging and are being decommissioned by their owners.

Now that both the botnet and the vulnerable devices behind it are dying out, cyber-security firm Forcepoint published a report on the botnet's past operations, without fear that its report could draw attention to vulnerable D-Link systems and spark a new series of attacks from other botnets.
Click to expand...

BOTNET EXPLOITED JUST ONE SINGLE VULNERABILITY
According to Forcepoint researchers, the Cereals botnet was unique in its modus operandi because it exploited just one vulnerability during all its eight-year life.
The vulnerability resided in the SMS notification feature of the D-Link firmware that powered the company's line of NAS and NVR devices.
Click to expand...

A HOBBY PROJECT?
First, the botnet exploited just one single vulnerability during the botnet's eight-year life, without ever bothering to expand its operation to other systems beyond D-Link NAS and NVRs.
Second, the botnet never strayed from its Anime video leeching purpose. Forcepoint said the botnet did not execute DDoS attacks, nor did it find evidence that the botnet tried to access user data stored on the NAS and NVR devices.

All of this suggests that the botnet's author, believed to be a German man named Stefan, never had any criminal intentions in building Cereals, a botnet that appears to have had just one single purpose -- downloading Anime vids.
Click to expand...

Forcepoint: The Cereals Story - Creating a Botnet During Breakfast

We are proud to provide all the details what we’ve been asked for since presenting our research last December at Botconf 2019. If you own a D-Link NAS or NVR device, care about network security or just being interested in exotic IoT botnets; this one is for you! A word of warning – this write-up goes into deep technical details. Enjoy!
Click to expand...

Log in or Sign up

For 8 years, a hacker operated a massive IoT botnet just to download Anime videos

guest Guest

Log in or Sign up

For 8 years, a hacker operated a massive IoT botnet just to download Anime videos

guest Guest

Useful Searches