Microsoft: Russian state hackers are using IoT devices to breach enterprise networks

guest · Aug 5, 2019

Microsoft: Russian state hackers are using IoT devices to breach enterprise networks
Microsoft said it detected Strontium (APT28) targeting VoIP phones, printers, and video decoders
August 5, 2019
https://www.zdnet.com/article/micro...ng-iot-devices-to-breach-enterprise-networks/

One of Russia's elite state-sponsored hacking groups is going after IoT devices as a way to breach corporate networks, from where they pivot to other more high-value targets.
Attacks have been observed in the wild said the Microsoft Threat Intelligence Center, one of the OS maker's cyber-security divisions.
MICROSOFT SPOTTED ATTACKS ON IOT DEVICES IN APRIL
Microsoft said that in April this year, its staff spotted Strontium attempting "to compromise popular IoT devices across multiple customer locations."

Microsoft said hackers used the compromised IoT devices as an entry point into their targets' internal networks, where they'd scan for other vulnerable systems to expand this initial foothold.

"After gaining access to each of the IoT devices, the actor ran tcpdump to sniff network traffic on local subnets," Microsoft said.
Microsoft plans to reveal more information about the Strontium April 2019 attacks later this week at the Black Hat USA 2019 security conference.
Click to expand...

Microsoft: Corporate IoT – a path to intrusion

Log in or Sign up

Microsoft: Russian state hackers are using IoT devices to breach enterprise networks

guest Guest

Log in or Sign up

Microsoft: Russian state hackers are using IoT devices to breach enterprise networks

guest Guest

Useful Searches