IoT devices have multiple hidden vulnerability security issues confirmed by one by one

Akamai, a content and services company, recently announced that it has observed that hackers are aggressively attacking vulnerabilities in home routers or video game consoles. In fact, most consumer Internet of Things (IoT) devices have many vulnerable vulnerabilities. These vulnerabilities have not been properly fixed since they were discovered.

According to reports, these vulnerabilities were discovered in a 2006 article on the security plug-in of the Universal Plug and Play (UPnP) protocol, but it was still an academic theory, but recently Akamai found evidence of hacking. Instead of attacking devices directly, hackers exploit vulnerabilities to block service attacks (DDoS), distribute malware, spam, phishing attacks, fake accounts, and click fraud.

The hacker's approach is to exploit the vulnerability of UPnP in general routers or other consumer devices to create a sophisticated proxy server network to cover hacker attacks. Akamai calls it a "mulTI-purpose proxy botnet."

There are multiple hidden vulnerabilities in IoT devices. Security issues are confirmed one by one.

Chad Seaman, Akamai's security director, said that many people ignored the fact that the device was fragile. In the study, they found that some machines did have very abnormal behavior, which also confirmed the theoretical research in 2006.

The purpose of UPnP is to enable devices on the network to connect to each other and identify each other. Therefore, a server can recognize that "a device is a printer." UPnP works in conjunction with other network protocols and negotiates automatic configuration of network communication, and can be used in applications. Used when sending large amounts of data to facilitate video streaming or video host communication without restrictions.

Once an IoT device is exposed to an open network without authentication, its credentials can be easily guessed or violently compromised, and hackers can scan all the agreements in a device and then use the series. The vulnerability of the business launched an attack.

This is also the way researchers found a network of malicious UPnP proxy servers. Akamai said that 4.8 million devices were discovered on the public network and incorrectly returned specific queries related to UPnP. About 765,000 devices were re-executed. In the face of greater network communication vulnerabilities, Akamai found that more than 65,000 devices had hackers exploiting other vulnerabilities, inputting one or more malicious commands into the router mechanism that controls traffic, and finally found that 17, hackers used to bypass traffic. IP addresses.

The case of using UPnP attacks is not just an example of Akamai's discovery. For example, Symantec recently released evidence that the espionage organizations it tracks use UPnP proxy servers to threaten routers and cover up their communications, but other observers point this out. Strategies are not common because they are difficult to establish.

Users are not aware of whether their devices are being exploited for UPnP proxy attacks, and if there is already a vulnerable device, they can hardly make self-defense in addition to new devices, and some devices allow users to disable UPnP. , but this can cause functional problems.

Although more and more devices have improved their UPnP over the years to avoid these risks, Akamai has found 73 brands and nearly 400 vulnerable IoT devices. The US Crisis Management and Coordination Center (CERT / CC) also stated that it has been told by Akamai that a large number of devices are still vulnerable to malicious NAT attacks, and this vulnerability has been confirmed.

7 Inch Tablet

When people talk about 7inch tablet, kids appears on their minds, especially for elementary students or kindergarten kids for playing intelligent exploitation games or online learning. Clients usually choose 7 inch tablet wifi only as 7 inch educational tablet for project, wifi one is much cheaper. Of course, 7 inch Android Tablet with 3G lite or 4G lite also optional. You can always see a right tablet at this store, no matter amazon 7 inch tablet, 8 inch android tablet, or 10.1 android tablet.

Except android tablet and window tablet, there are Education Laptop, Mini PC , All In One PC, which are is the main series at this store. Any other special configuration interest, just email or call us, you will receiving value information in 1-2 working days.

To meet clients` changing requirements, we contributes 10-20% profit to develop new designs according market research and client`s feedback.

So you are always welcome if can share your special demand or your clients opinion for the products.

7 Inch Tablet,7 Inch Android Tablet,Amazon 7 Inch Tablet,7 Inch Tablet Wifi Only,7 Inch Educational Tablet

Henan Shuyi Electronics Co., Ltd. , https://www.sycustomelectronics.com

Posted on