Tag

Iot Devices

All articles tagged with #iot devices

cybersecurity4 months ago

Oregon Man Charged Over 'Rapper Bot' DDoS Attacks

A 22-year-old Oregon man, Ethan J. Foltz, was arrested for operating Rapper Bot, a large IoT-based botnet used for launching massive DDoS attacks, including one that disrupted Twitter/X in March 2025. The botnet, which enslaved around 65,000 devices globally, was rented out to extortionists and was responsible for over 370,000 attacks targeting thousands of victims. Foltz admitted to building and controlling the botnet, which was designed to be manageable and stealthy, and he discussed its capabilities and rival threats in encrypted chats. The case highlights the significant financial and operational risks posed by such cybercriminal activities.

technology5 months ago

FBI and Google Urge 10 Million Android Users to Disconnect Devices Amid Malware Threats

The FBI warns that over 10 million Android devices, mainly low-cost IoT products from China, are infected with the malicious BadBox 2.0 malware, which is pre-installed in device firmware and used for criminal activities. Google has taken legal action and updated protections, while the FBI recommends users disconnect suspicious devices from their networks to prevent further harm.

technology7 months ago

FBI Warns of BADBOX 2.0 Android Malware Impacting Millions

The FBI warns that the BADBOX 2.0 malware has infected over 1 million consumer IoT devices, mainly Android-based smart TVs and streaming devices, turning them into residential proxies for malicious activities like ad fraud and credential stuffing. Despite disruptions, the botnet continues to grow globally, with devices from China shipped worldwide, and consumers are advised to monitor their devices and avoid unofficial app stores.

technology2 years ago

"Unraveling the Mystery of LG Washing Machine's Excessive Daily Data Usage"

A user discovered their LG washing machine was using an unusually high amount of data, sparking concerns of potential hacking or cryptomining. However, it was later revealed to likely be a reporting inaccuracy on the router interface tool, highlighting the prevalence of software bugs in IoT devices and raising questions about their security.

technology2 years ago

Unveiling the Hidden Dangers of Smart Home Security

A major study conducted by IMDEA Networks and Northeastern University has revealed alarming security and privacy threats within smart homes. The researchers found that IoT devices and mobile apps in smart homes can inadvertently expose sensitive data, such as unique device names, UUIDs, and even the geographic location of households. This information can be exploited by companies involved in surveillance capitalism without the users' knowledge. The study highlights the need for better protections in smart homes and calls for action from manufacturers, software developers, IoT and mobile platform operators, and policymakers to enhance the privacy and security of these devices.

cybersecurity2 years ago

"Mirai Malware: Expanding Targets and Reloading Exploits for Massive Router Botnet"

A Mirai-based DDoS malware botnet known as IZ1H9 has expanded its targets by adding thirteen new payloads to exploit vulnerabilities in Linux-based routers and routers from various manufacturers. The botnet compromises devices to enlist them in its DDoS swarm and launches attacks on specified targets. The campaign targets a range of vulnerabilities dating from 2015 to 2023, affecting devices from D-Link, Zyxel, TP-Link, TOTOLINK, and others. The malware uses a command and control server to execute DDoS attacks, with supported attack types including UDP, UDP Plain, HTTP Flood, and TCP SYN. Users are advised to use strong admin credentials, update firmware, and minimize exposure of IoT devices to the public internet.

technology2 years ago

"Flipper Zero Unveils Dedicated App Store for Hobby Hackers"

The Flipper Zero, a dolphin-themed digital multitool, now has a mobile app store built into its official app, making it easier to browse and install third-party tools and plug-ins. The Flipper Zero has various capabilities, including sub-GHz wireless, RFID, NFC, and Bluetooth radios, and can emulate Amiibos, function as a universal remote, and even root vacuum cleaners. The app store provides a distribution channel for developers to share new apps and experiments, with apps reviewed by the Flipper team. The marketplace offers a range of utilities, games, and programs that interface with external devices. The Flipper Zero is continuously in stock on the Flipper website.

technology2 years ago

Security flaw in Belkin's Wemo Smart Plug Mini V2 remains unpatched.

Security researchers have found an exploitable vulnerability in the Wemo Smart Plug Mini V2, which allows a savvy hacker to gain remote command of the plug. Belkin has stated that since the device is at the end of its life, it will not be receiving a fix. The researchers recommend avoiding exposure of the Wemo plug’s UPnP ports to the internet and segmenting your network. The vulnerability could potentially be exploited without physical access and highlights the need for better security measures in IoT devices.

technology2 years ago

Google Assistant drops third-party smart display support.

Google Assistant has ended software updates for third-party smart displays, including Lenovo Smart Display, JBL Link View, and LG Xboom AI ThinQ WK9 Smart Display. This move could impact the quality of video calls and meetings on these devices. Google has continued to bring new features to its own smart displays, now sold under the Nest Hub brand, but these devices are running software based on Google's newer Fuchsia operating system. The limited lifespan of IoT devices is highlighted, as without continued software updates and support, they may gradually lose functionality until they become e-waste.

cybersecurity2 years ago

Smart Garage Door Opener Vulnerability Allows Remote Hacking

Security researcher Sam Sabetan has discovered a major security hole in the mobile app for Nexx's smart garage door controller, which allows hackers to remotely open connected doors. The vulnerability is due to a shared universal password that applies across all devices and leaks via Nexx's API and firmware. Sabetan also uncovered four other related vulnerabilities that can involve hijacking Nexx's smart plugs and smart alarm products. Despite attempts to contact the company, Nexx has been silent on fixing the issue. Sabetan estimates that over 40,000 devices are impacted and recommends disconnecting the devices and contacting Nexx for remediation steps.