2023-10-06 07:00:00
Cybersecurity company Kaspersky recently highlighted the growing threat posed by the dark web to Internet of Things services.
The rise of the digital world is not without risks. The company Kaspersky has just revealed a dark side of the web, the “dark web”, where demand for services linked to the Internet of Things (IoT) is flourishing.
Kaspersky decodes the IoT threat on the dark web
Kaspersky, in a recent press release, highlighted the growing popularity of DDoS attacks orchestrated via IoT botnets. Indeed, these attacks seem to be the daily bread of hackers. But why ? The answer is simple: a “thriving underground economy on the dark web, focused on IoT-related services”.
Yet the majority of IoT infiltrations come from simple methods like brute forcing weak passwords. Furthermore, Kaspersky reported that in the first half of 2023, 98% of these attempts targeted the Telnet protocolthe rest targeting the more robust SSH protocol.
Malicious Ads and Services: An Overview of the Black Market
During this same period, Kaspersky analysts spotted more than 700 ads promoting DDoS attack services on various dark web forums. That wasn’t all. They also identified offers for exploits regarding zero-day vulnerabilities in IoT devices. Additionally, these threats were often accompanied by malware tools and software. Notably, a variant of the infamous botnet, Mirai, has been frequently observed. Due to this fierce competition, new features appear to combat competing malware. This includes setting up firewalls, disabling remote management, and eliminating processes linked to rival malware.
Kaspersky, aware of these risks, insists on the importance of strengthening cybersecurity. Yaroslav Shmelev, security expert at Kaspersky, said: “We believe it is essential to make it mandatory to change default passwords on IoT devices and regularly release patches to address these vulnerabilities.” Thus, Kaspersky emphasizes the need for accountability for IoT security. Vendors must redouble their efforts from product design to ensure proactive user protection.
Faced with this growing threat, several recommendations have been proposed. Among them, the importance of regularly carrying out security auditsmonitor, analyze and detect ICS network trafficwhile ensuring the protection of industrial and enterprise endpoints.
1696578558
#Kaspersky #reveals #secrets #Dark #Web #IoT
