New security camera compromised by worm within minutes of installation
1–10 of 94 posts
Re: New security camera compromised by worm within minutes of installation
#2Why is this on the frontpage? :o
Re: New security camera compromised by worm within minutes of installation
#3Why is this on the frontpage? :o
Have you read followup tweets?
Re: New security camera compromised by worm within minutes of installation
#4those tweets are very cool. It's very funny to see it happening.
Re: New security camera compromised by worm within minutes of installation
#5TL;DR: Guy bought a webcam, installed it, and within one and a half minute it was already infected and even kicked him off his telnet connection.
The twitter stream narrates what he configured before turning the webcam on, and give details on how things unfolded.
Re: New security camera compromised by worm within minutes of installation
#6This is why the appliance market - Dropcam in this case - is often safe from the DIY enthusiast market. Setting these up is one hurdle. After that's done there's any combination of: network maintenance, security patches, updates, hosting a local server, DNS, troubleshooting etc.
For some people, it's just worth $150 + 10/mo to not have something else to think about.
Re: New security camera compromised by worm within minutes of installation
#7This is absolutely fascinating - and stunning that it only took ~90 seconds to be infected. Turns out the source code is... open source:
https://github.com/jgamblin/Mirai-Source-Code/blob/6a5941be6...
Re: New security camera compromised by worm within minutes of installation
#8I don't understand how the bot net found his camera so instantly when he turned it on or installed it. Within moments/seconds, it was attempting to infiltrate a brand new device.
Re: New security camera compromised by worm within minutes of installation
#9I don't understand how the bot net found his camera so instantly when he turned it on or installed it. Within moments/seconds, it was attempting to infiltrate a brand new device.
There aren't so many IPv4 addresses and connections are fast enough even for residential users. If considering a botnet, even faster.
There is even services that scan the whole ipv4 in less than 5 minutes: https://zmap.io/
And a list of how to do it: http://www.securitynewspaper.com/2015/10/15/how-to-scan-whol...
Re: New security camera compromised by worm within minutes of installation
#10Note that this was a deliberate setup.
The safest thing to do for home routers is to kill UPNP, so that random devices on the inside can't open listening ports to the outside.