New Charges, Sentencing in Satori IoT Botnet Conspiracy
Summary: The U.S. Justice Department charged Aaron Sterritt of Northern Ireland and Logan Shwydiuk of Canada with conspiring to build IoT botnets from hundreds of thousands of routers and other devices for DDoS attacks, while Kenneth Schuchman of Vancouver, Washington was sentenced to 18 months of community confinement and drug treatment. Prosecutors say Sterritt wrote code for the Masuta, Satori, Okiru and Fbot strains, and that Masuta had infected an estimated 700,000 systems by November 2017, enough to hurl 100 gigabits of junk data per second at targets.
Bottom line: The botnets were built largely by scanning for devices still running weak factory default passwords and unpatched firmware, so the same 700,000-device pool that could throw 100 Gbps at a target is a standing inventory of unmanaged equipment on somebody's network.
Read the original at Krebs on Security ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026