IoT botnet targeting your enterprise? Nope. Just a kid with an ExploitDB account

guest · Apr 5, 2019

IoT botnet targeting your enterprise? Nope. Just a kid with an ExploitDB account
Most IoT botnets are the work of kids playing with exploits they've found online
April 5, 2019
https://www.zdnet.com/article/iot-b...se-nope-just-a-kid-with-an-exploitdb-account/

Headlines like "IoT botnet targets enterprise devices" sound very scary, but the reality is that many of these botnets are the work of kids playing around with random exploits they found online, and many of these botnets die out in a matter of weeks as the authors get bored or move on to other projects.

The prime example of this is Kepler [...]
On a first read, any report on Kepler would seem like the botnet author was intentionally aiming to get a foothold on corporate networks so they could later deploy more potent malware.

"We're just a couple of friends having fun," the two said before admitting that this was actually the second botnet they put together, after also creating one last year.
Further, the botnet didn't use 27 exploits, as Palo Alto Networks initially reported, but 43, according to Nipsu, one of the Kepler authors --all, of course, chosen at random.
Click to expand...

KEPLER IS A TREND, NOT AN EDGE CASE
These revelations aren't just an isolated edge case in the IoT botnet scene. Many botnet authors are just kids taking their first steps in the world of programming and cybersecurity, playing around with exploits, before realizing the legal problem they could be in, and moving on to other careers --or getting arrested [1, 2].
Click to expand...

Log in or Sign up

IoT botnet targeting your enterprise? Nope. Just a kid with an ExploitDB account

guest Guest

Log in or Sign up

IoT botnet targeting your enterprise? Nope. Just a kid with an ExploitDB account

guest Guest

Useful Searches