Hacker is targeting DNA sequencer applications

guest · Jun 17, 2019

Hacker is targeting DNA sequencer applications
Threat actors are targeting Web-based DNA sequencer applications leveraging a still-unpatched zero-day to take over the targeted systems
June 17, 2019
https://securityaffairs.co/wordpress/87188/hacking/dna-sequencer-applications-attacks.html

Starting from June 12, 2019, the researcher Ankit Anubhav from NewSky Security, observed threat actors targeting Web-based DNA sequencer applications. The attackers are leveraging a still-unpatched zero-day vulnerability, tracked as CVE-2017-6526, to gain full control over the targeted systems.

The attackers are scanning the Internet for dnaLIMS, a web-based application to handle DNA sequencing operations, these devices are used in the research industry.
Why DNA sequencing apps?
Attackers could be interested in stealing hashes of DNA sequences from the application’s database to resell them on the dark web or compromising servers to add to their botnet.

It is still unclear why attackers are targeting DNA sequencing apps, the number of these devices is limited (only a few tens of devices exposed online) and it is unlike that hackers want to use compromise systems to carry out DDoS attacks.
Click to expand...

[...] As a result,the number of such devices is not very high and might not help greatly in DDoS.” concludes the expert.
“However, successful exploitation and DNA theft in specific cases can be fruitful. Either it can be sold in black market, or a high profile attacker can actually be looking for a specific persons’ data.

We are not aware of a patch for this bug. In fact, when we had a look at the original disclosure by ShoreBreakSecurity, we saw a funny disclosure response by the vendor,indicating they don’t take DNA theft seriously.”
Click to expand...

Log in or Sign up

Hacker is targeting DNA sequencer applications

guest Guest

Log in or Sign up

Hacker is targeting DNA sequencer applications

guest Guest

Useful Searches