Subscriber Discussion
Botnet Of 900 IP Cameras Launch DDOS Attack
Nearly one thousand geographically disparate ip cameras have been launching coordinated distributed denial of service attacks against an unidentified targets, reported Incapsula
The attack was run of the mill, peaking at 20,000 requests per second (RPS). The surprise came later when, upon combing through the list of attacking IPs, we discovered that some of the botnet devices were located right in our own back yard. Further investigation of the offending IPs showed that they belonged to CCTV cameras, all accessible via their default login credentials.
Further research showed that these cameras had been used in previous attacks possibly by unrelated hackers.
At the bottom of that post, we asked them what cameras were involved. Their response:
"In this case it wasn't any particular manufacturer or camera model, just a seemingly random cluster of cameras that were configured to allow remote access, while also being accessible via default/easy-to-guess credentials. (e.g., amdin/admin, admin/12345, etc) You can find those is the strings dump above."
Where on the scale of white hat/black hat would you place a bot that helpfully changes the admin password to something random and unguessable? The technology seems trivial: from zombies to doorstops, maybe even permanently if there's no hardware reset button.
Newest Discussions
| Discussion | Posts | Latest |
|---|---|---|
|
Started by
Ethan Ace
|
8
|
less than a minute by Undisclosed Integrator #2 |
|
Started by
Undisclosed Integrator #1
|
5
|
25 minutes by Ethan Ace |
|
Started by
Jorge Lozano
|
1
|
less than a minute by Jorge Lozano |
|
Started by
Undisclosed Integrator #1
|
3
|
about 2 hours by Undisclosed Integrator #1 |
|
Where IPVM Has Been Cited 2020/2021 - NY Times, Wapo, Reuters, NBC News, Fast Company, PC Mag, More
(126)
Started by
Donald Maye
|
126
|
less than a minute by Donald Maye |
