IT NEWS - CURRENT SECURITY THREAT - IoT (Internet of Things) ATTACKS
The FBI has posted a warning regarding non-secured IoT(Internet of Things), or "smart" devices.
According to Techopedia, the Internet of Things is "everyday physical objects being connected to the internet and being able to identify themselves to other devices." This object no longer "just relates to its user, but is now connected to surrounding objects and database data." These objects can be refrigerators, garage door openers, thermostats, DVR's, healthcare appliances, vehicles, doorbells, door locks, fitness trackers and cellular phones to name a few. Even dog collars and hearing aids can be connected to the internet!
Hackers are searching for vulnerable devices to use "as proxies or intermediaries for Internet requests to route malicious traffic for cyber-attacks and computer network exploitation." A malicious cyber actor may gain access to and utilize the compromised device to invade a local network, send spam emails and/or attack other networks outside of the original one. Because the IP address of a local device is in the U.S., many of the filters that would block this type of behavior from known suspicious countries could allow this traffic to pass.
How to protect yourself:
- Always keep a product's firmware and patches up to date. This includes routers and firewalls.
- Reboot devices regularly.
- Change any default passwords immediately. Never reuse a password on more than one device.
- If possible, keep any IoT objects on a separate network or VLAN from the main network.
- Install antivirus on any applicable devices and keep them up to date.
For further reading:
If you are not sure if one of your devices is affected, we can evaluate for best practices and make recommendations. Contact us to schedule service.
LeeShanok takes IT security seriously and it is our duty to inform our clients about potential threats and vulnerabilities that can affect your business. LeeShanok is monitoring the current status of security threats and will continue to inform its clients of any new information.
If you have any questions or need assistance with checking and updating your devices, please don't hesitate to contact us.
Your Technology Partner,
The LeeShanok Team