Reaper: Calm Before the IoT Security Storm?
Summary: CheckPoint announced on Oct. 19, 2017 that it had been tracking a new IoT botnet it called IoTroop, which it estimated had already infected one million organizations and which spreads through at least nine known vulnerabilities across nearly a dozen device makers, including AVTECH, D-Link, GoAhead, Netgear and Linksys. Netlab 360, which calls the malware Reaper, reported the next day that it borrows some Mirai source code but scans less aggressively and spreads more deliberately, and that about half the vulnerabilities it exploits were first detailed in just the past few months.
What's compelling: A million already-infected organizations and a worm sitting quietly on unpatched cameras, DVRs and routers is the same pattern that preceded Mirai's 620 Gbps hit on KrebsOnSecurity.com and the Dyn outage that took down Twitter, SoundCloud, Spotify and Reddit - and Reaper's operators have not yet shown their hand.
Read the original at Krebs on Security ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026