Newsletters
News & Information for Technology Purchasers NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
This ad will display for the next 20 seconds. Click for more information, or
Home Enterprise I.T. Cloud Computing Applications Hardware More Topics...
Network Security
DDoS Protection Powered By Verisign
Average Rating:
Rate this article:  
Security Firm Reports First Spam Attack Using a Refrigerator

Security Firm Reports First Spam Attack Using a Refrigerator
By Barry Levine

Share
Share on Facebook Share on Twitter Share on Linkedin Share on Google Plus

David Knight of Proofpoint said devices in the Internet of Things "are poorly protected at best and consumers have virtually no way to detect or fix infections when they do occur." Businesses, he said, may find distributed attacks "increasing as more and more of these devices come on-line and attackers find additional ways to exploit them."
 


We now have the first evidence that the emerging Internet of Things is also the Internet of Things That Can Deliver Spam. A security firm has uncovered a global cyberattack that harnessed connected household devices, including a refrigerator.

Proofpoint Inc., based in Sunnyvale, California, said the attack utilized 100,000 consumer devices, employing them as other attacks have used captured computers -- to secretly deliver spamming e-mails numbering in the hundreds of thousands. The attack took place recently, between Dec. 23 and Jan. 6, and included in its botnet at least one smart refrigerator, as well as home-networking routers, connected multimedia centers and smart TVs.

The security company told news media that the attack "may be the first proven Internet of Things-based cyberattack involving conventional household 'smart' appliances." The attack, Proofpoint said, was sent in bursts of 100,000 e-mails three times daily, directed at companies and individuals around the globe, and over one-quarter of the spam was sent by compromised, non-computing devices.

'Poorly Protected'

No single IP address was used to send more than 10 e-mails, which made the attack's origin more difficult to locate, and the commandeering of the devices involved the relatively simple tasks of taking advantage of misconfigurations and default passwords.

David Knight, general manager of the Information Security Division at Proofpoint, said in a statement that devices in the Internet of Things "are poorly protected at best and consumers have virtually no way to detect or fix infections when they do occur." Businesses, he said, may find distributed attacks "increasing as more and more of these devices come on-line and attackers find additional ways to exploit them."

While not surprising, this new turn in malware raises a variety of questions about the addition of intelligence and connectivity to appliances and other non-computing products. If they can become "thingbots" and commandeered for nefarious purposes, will they also need the kind of anti-virus software, updates and continual vigilance that users are now required to do for their computers and mobile devices?

Application Control, ISP Vigilance

And how much additional effort and expense will it take to build and monitor a security fence around intelligent TVs, refrigerators, stoves, lighting devices in homes, connected coffee pots, smart thermostats and the like? According to some estimates, the Internet of Things already includes more than 2 billion devices, and industry research firm IDC has predicted there will be more than 200 billion connected things by 2020.

Peter Firstbrook, an analyst with Gartner, told us that "manufacturers have to get smart" about making all of these devices attack-proof, primarily by utilizing "application control, not anti-virus software," so that a connected device is built to run only specified applications and accept updates only from a single source, such as Westinghouse.

But some devices have become, essentially, computers able to run a large variety of applications, such as smart cars or connected TVs. Protection for those devices in particular, Firstbrook said, will need to happen at the network level, through a third party such as Zscaler or through an ISP, providing a continual scanning of all incoming and outgoing traffic.
 

Tell Us What You Think
Comment:

Name:



Salesforce.com is the market and technology leader in Software-as-a-Service. Its award-winning CRM solution helps 82,400 customers worldwide manage and share business information over the Internet. Experience CRM success. Click here for a FREE 30-day trial.


 Network Security
1.   UPS Stores Hit by Data Breach
2.   Target Data Breach Cost: $148 Million
3.   Aruba Handles Black Hat with Aplomb
4.   Chinese Hackers Steal Patient Data
5.   FBI Cybersquad To Add Agents


advertisement
UPS Stores Hit by Data Breach
Biz must adopt better security measures.
Average Rating:
Target Data Breach Cost: $148 Million
Better customer data protection needed.
Average Rating:
FBI Cybersquad To Add Agents
Rewarded for recent security successes.
Average Rating:
Product Information and Resources for Technology You Can Use To Boost Your Business

Network Security Spotlight
UPS Stores in 24 States Hit by Data Breach
Big Brown has been breached. UPS said that about 105,000 customer transactions at 51 of its UPS Store locations in 24 states could have been compromised between January and August.
 
Cost of Target Data Breach: $148 Million Plus Loss of Trust
The now infamous Target data breach is still costing the company -- and its shareholders -- plenty. In fact, the retailing giant forecast the December 2013 incident cost shareholders $148 million.
 
Aruba Networks Handles Black Hat with Aplomb
It's not an easy job. Aruba Networks' task throughout the Black Hat USA conference in Las Vegas this month was to ensure thousands of attendees could connect without malicious attacks.
 

Enterprise Hardware Spotlight
Acer's New Desktop Box Rides the Chrome OS Wave
Filling out its Chrome OS line, Acer is following the introduction of a larger Chromebook line earlier this month with a new tiny $180 desktop Chromebox and also a smaller Chromebook.
 
Three New Lenovo PCs Aimed at Business Users
Businesses everywhere want computing solutions that do more for less money, and Lenovo has unveiled three new desktop PCs that offer solid computing at a budget-minded price.
 
Aruba Networks Handles Black Hat with Aplomb
It's not an easy job. Aruba Networks' task throughout the Black Hat USA conference in Las Vegas this month was to ensure thousands of attendees could connect without malicious attacks.
 

Mobile Technology Spotlight
Google Glass Adds Voice Access to Phone Contacts
The latest update to Google Glass will let users access their top 20 phone contacts with voice commands alone. A user can then choose a phone call, Google hangouts, e-mail or text messaging.
 
Samsung, B&N Target Amazon with Nook Tablet
They've seen the enemy and it is Amazon. So Samsung and Barnes & Noble are teaming up to combat their common foe with a 7-inch tablet that blends Samsung’s tech, Nook’s content and e-reader platform.
 
Acer's New Desktop Box Rides the Chrome OS Wave
Filling out its Chrome OS line, Acer is following the introduction of a larger Chromebook line earlier this month with a new tiny $180 desktop Chromebox and also a smaller Chromebook.
 

Navigation
NewsFactor Network
Home/Top News | Enterprise I.T. | Cloud Computing | Applications | Hardware | Mobile Tech | Big Data | Communications
World Wide Web | Network Security | Data Storage | CRM Systems | Microsoft/Windows | Apple/Mac | Linux/Open Source | Personal Tech
Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.