Cyber Risks · Krebs on Security

Hacked Cameras, DVRs Powered Today’s Massive Internet Outage

Summary: A sustained attack on Dyn, an Internet infrastructure company providing critical technology services to top destinations, caused outages and network congestion for sites including Twitter, Amazon, Tumblr, Reddit, Spotify and Netflix. Security firm Flashpoint said the attack was launched at least in part by a Mirai-based botnet built mainly on compromised digital video recorders and IP cameras made by Chinese company XiongMai Technologies, whose components are sold downstream to other vendors.

Bottom line: Flashpoint scanned the Internet on Oct. 6 and found more than 515,000 systems vulnerable to the flaws it discovered, and the Mirai source code was released at the end of September 2016, letting anyone build an attack army from devices whose Telnet and SSH passwords are hardcoded into firmware and cannot feasibly be changed.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related