If IoT devices means an old linux distro running on the wild, thats an always go for distributed network of devices ready to act.
What are Attackers after on IoT Devices?
11–20 of 29 posts
Re: What are Attackers after on IoT Devices?
#12IP addreses.
Re: What are Attackers after on IoT Devices?
#13how are people performing intrusion detection on home iot devices?
If you’re running your custom
homebuilt router, you can use IDS systems like snort[0] or suricata[1]
It’s pretty fun to setup !, you can take any old desktop/laptop at your home and make them into your own custom router by running a linux or bsd instance on it.
If you go this route, I would recommend suricata ids as you can setup more complex and sophisticated system easily, compared to snort.
[1](https://suricata.io/)
Re: What are Attackers after on IoT Devices?
#14No post body was provided.
Re: What are Attackers after on IoT Devices?
#15how are people performing intrusion detection on home iot devices?
I currently rely pretty much exclusively on my Unifi gateway’s not-great IPS/IDS system, which allegedly receives updated threat intelligence feeds periodically. Outside of actual intrusion detection, I prevent my IoT devices (which are located in their own VLAN) from contacting the internet wherever possible, and entirely block any inter-VLAN traffic other than responses to connections initiated from devices residin…
> their own VLAN) from contacting the internet wherever possible, and entirely block any inter-VLAN traffic other than responses to connections initiated from devices residing on a “trusted clients network”, which hosts my phone, laptop etc.
I am interested in this kind of setup but lack relevant experience. Is this stuff you set up in the stock Unifi admin pages?
Re: What are Attackers after on IoT Devices?
#16I don't know if current IoT devices have the resources to mine cryptocurrencies, but it's been tried. Eventually someone will pull it off.
Many consumer IoT devices are just small microcontrollers that don't run Linux. Usually just a small embedded application in an RTOS, without much security at all.
For powerful application processors like your TV, smartphone, router...there's plenty of rich data to exfiltrate and resources to abuse.
For a microcontroller, you're either interested in controlling it remotely or stealing some secret from it e.g. WLAN password or a cloud access credential. Anything else is quite hard and has diminishing returns. However, in great numbers they can provide a significant DDoS capability.
Re: What are Attackers after on IoT Devices?
#17I don't know if current IoT devices have the resources to mine cryptocurrencies, but it's been tried. Eventually someone will pull it off.
Probably way better to sell as botnet. Doubt mining on iot is useful. Even on a rasp4 it’s pretty pointless
Re: What are Attackers after on IoT Devices?
#18Access, data, what have you.
IoT/Edge devices are also the "perfect tools" for phishing somebody for more valuable information than mere biometric/similar data.
Re: What are Attackers after on IoT Devices?
#19I don't know if current IoT devices have the resources to mine cryptocurrencies, but it's been tried. Eventually someone will pull it off.
Many consumer IoT devices are just small microcontrollers that don't run Linux. Usually just a small embedded application in an RTOS, without much security at all. For powerful application processors like your TV, smartphone, router...there's plenty of rich data to exfiltrate and resources to abuse. For a microcontroller, you're either interested in controlling it remotely or stealing some secret from it e.g. WLAN pa…
"Usually just a small embedded application in an RTOS, without much security at all."
In security, that's probably a strength, not a weakness, if done right. There are less lines of code that might contain vulnerabilities. There is no random side service, JS library or OS vulnerability to attack, there might be nothing to listen for incoming connections, etc.
Re: What are Attackers after on IoT Devices?
#20I don't know if current IoT devices have the resources to mine cryptocurrencies, but it's been tried. Eventually someone will pull it off.
Many consumer IoT devices are just small microcontrollers that don't run Linux. Usually just a small embedded application in an RTOS, without much security at all. For powerful application processors like your TV, smartphone, router...there's plenty of rich data to exfiltrate and resources to abuse. For a microcontroller, you're either interested in controlling it remotely or stealing some secret from it e.g. WLAN pa…
When power is paid by somebody else and you benefit the hash power, regardless of how low it is in one unit, once you have million of unit you can create your own bitcoin pool and strike gold. I bet mining is way more profitable than DDoS.