Newsletters
Customer Relationship Management News NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
Home CRM Systems Customer Service Business Intelligence Sales & Marketing More Topics...
Eliminate costly downtime!
Find out how with Free White Paper
& enter to win a Samsung Galaxy Note

www.apc.com
Network Security
Fiercely productive scanners
Average Rating:
Rate this article:  
Security Firm Reports First Spam Attack Using a Refrigerator
Security Firm Reports First Spam Attack Using a Refrigerator

By Barry Levine
January 17, 2014 12:29PM

Bookmark and Share
David Knight of Proofpoint said devices in the Internet of Things "are poorly protected at best and consumers have virtually no way to detect or fix infections when they do occur." Businesses, he said, may find distributed attacks "increasing as more and more of these devices come on-line and attackers find additional ways to exploit them."
 


We now have the first evidence that the emerging Internet of Things is also the Internet of Things That Can Deliver Spam. A security firm has uncovered a global cyberattack that harnessed connected household devices, including a refrigerator.

Proofpoint Inc., based in Sunnyvale, California, said the attack utilized 100,000 consumer devices, employing them as other attacks have used captured computers -- to secretly deliver spamming e-mails numbering in the hundreds of thousands. The attack took place recently, between Dec. 23 and Jan. 6, and included in its botnet at least one smart refrigerator, as well as home-networking routers, connected multimedia centers and smart TVs.

The security company told news media that the attack "may be the first proven Internet of Things-based cyberattack involving conventional household 'smart' appliances." The attack, Proofpoint said, was sent in bursts of 100,000 e-mails three times daily, directed at companies and individuals around the globe, and over one-quarter of the spam was sent by compromised, non-computing devices.

'Poorly Protected'

No single IP address was used to send more than 10 e-mails, which made the attack's origin more difficult to locate, and the commandeering of the devices involved the relatively simple tasks of taking advantage of misconfigurations and default passwords.

David Knight, general manager of the Information Security Division at Proofpoint, said in a statement that devices in the Internet of Things "are poorly protected at best and consumers have virtually no way to detect or fix infections when they do occur." Businesses, he said, may find distributed attacks "increasing as more and more of these devices come on-line and attackers find additional ways to exploit them."

While not surprising, this new turn in malware raises a variety of questions about the addition of intelligence and connectivity to appliances and other non-computing products. If they can become "thingbots" and commandeered for nefarious purposes, will they also need the kind of anti-virus software, updates and continual vigilance that users are now required to do for their computers and mobile devices?

Application Control, ISP Vigilance

And how much additional effort and expense will it take to build and monitor a security fence around intelligent TVs, refrigerators, stoves, lighting devices in homes, connected coffee pots, smart thermostats and the like? According to some estimates, the Internet of Things already includes more than 2 billion devices, and industry research firm IDC has predicted there will be more than 200 billion connected things by 2020.

Peter Firstbrook, an analyst with Gartner, told us that "manufacturers have to get smart" about making all of these devices attack-proof, primarily by utilizing "application control, not anti-virus software," so that a connected device is built to run only specified applications and accept updates only from a single source, such as Westinghouse.

But some devices have become, essentially, computers able to run a large variety of applications, such as smart cars or connected TVs. Protection for those devices in particular, Firstbrook said, will need to happen at the network level, through a third party such as Zscaler or through an ISP, providing a continual scanning of all incoming and outgoing traffic.
 

Tell Us What You Think
Comment:

Name:



APC has an established a reputation for solid products that virtually pay for themselves upon installation. Who has time to spend worrying about system downtime? APC makes it easy for you to focus on business growth instead of business downtime with reliable data center systems and IT solutions. Learn more here.


 Network Security
1.   Michaels: Nearly 3M Cards Breached
2.   Heartbleed Could Cost Millions
3.   Google Street View Unravels CAPTCHAs
4.   Teen Arrested for Heartbleed Hack
5.   IBM Adds Disaster Recovery to SoftLayer


advertisement
Michaels: Nearly 3M Cards Breached
But the hack has been contained.
Average Rating:
Heartbleed Could Cost Millions
But it could have been prevented.
Average Rating:
Don't Reset Passwords for Heartbleed?
Added caution needed to ensure security.
Average Rating:
Product Information and Resources for Technology You Can Use To Boost Your Business

Network Security Spotlight
Michaels Says Nearly 3M Credit, Debit Cards Breached
Arts and crafts retail giant Michaels Stores has confirmed that a data breach at its POS terminals from May 2013 to Jan. 2014 may have exposed nearly 3 million customer credit and debit cards.
 
Heartbleed Could Cost Millions, Could Have Been Prevented
Early estimates of Heartbleed’s cost to enterprises are running in the millions. The reason: revoking all the SSL certificates the bug leaked will come at a very hefty price.
 
Google's Street View Software Unravels CAPTCHAs
The latest software Google uses for its Street View cars to read street numbers in images for Google Maps works so well that it also solves CAPTCHAs, those puzzles designed to defeat bots.
 

Enterprise Hardware Spotlight
Vaio Fit 11A Battery Danger Forces Recall by Sony
Using a Sony Vaio Fit 11A laptop? It's time to send it back to Sony. In fact, Sony is encouraging people to stop using the laptop after several reports of its Panasonic battery overheating.
 
Continued Drop in Global PC Shipments Slows
Worldwide shipments of PCs fell during the first three months of the year, but the global slump in PC demand may be easing, with a considerable slowdown from last year's drops.
 
Google Glass Finds a Home in Medical Education, Practice
Google Glass may find its first markets in verticals in which hands-free access to data is a boon. Medicine is among the most prominent of those, as seen in a number of Glass experiments under way.
 

Mobile Technology Spotlight
Google Releases Chrome Remote Desktop App for Android
You're out on a sales call, and use your Android mobile device to grab a file you have back at the office on your desktop. That's a bit easier now with Google's Chrome Remote Desktop app for Android.
 
Amazon 3D Smartphone Pics Leaked
E-commerce giant Amazon is reportedly set to launch a smartphone after years of development. Photos of the phone, which may feature a unique 3D interface, were leaked by tech pub BGR.
 
Zebra Tech Buys Motorola Enterprise for $3.45B
Weeks after Lenovo bought Motorola Mobility’s assets from Google for $2.91 billion, Zebra Technologies is throwing down $3.45 billion for Motorola’s Enterprise business in an all-cash deal.
 

Navigation
CRM Daily
Home/Top News | CRM Systems | Customer Service | Business Intelligence | Sales & Marketing | Contact Centers | Customer Data | CRM Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters | XML/RSS Feed

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.