Research notes amount of malware targeting smart devices more than doubled in 2017

Posted on Jul 7 2017 - 2:59pm by Upgrade Staff

The total number of malware samples targeting smart devices has reached more than 7,000, with over half of these emerging in 2017, according Kaspersky Lab’s researchers. With over 6 billion smart devices being used across the globe, people are increasingly being put at risk from malware targeting their connected lives.

Kaspersky Lab_Smart Devices.png

Smart devices – such as smartwatches, smart TVs, routers, and cameras – are connecting to each other and building the growing Internet of Things (IoT) phenomenon, a network of devices equipped with embedded technology that allows them to interact with each other or the external environment.

Because of the large number and variety of devices, the IoT has become an attractive target for cybercriminals. By successfully hacking IoT devices criminals are able to spy on people, blackmail them, and even discreetly make them their partners in crime. What’s worse, botnets such as Mirai and Hajime have indicated that the threat is on the rise.

Kaspersky Lab’s experts have conducted research into IoT malware to examine how serious the risk is. They have set up honeypots – artificial networks, which simulate the networks of different IoT devices (routers, connected cameras etc.) to observe malware attempting to attack their virtual devices.

They did not have to wait long – attacks using known and previously unknown malicious samples started almost immediately after the honeypot was set up.

Most of the attacks registered by the company’s experts targeted digital video recorders or IP cameras (63%), and 20% of hits were against network devices, including routers, and DSL modems, etc. About 1% of targets were people’s most common devices, like printers and smart home devices.

READ:  Kaspersky Lab discovers Triada mobile Trojan invading Android’s brains

China (17%), Vietnam (15%), and Russia (8%) emerged as the top-3 countries with attacked IoT devices, each presenting a large number of the infected machines. Brazil, Turkey and Taiwan – all at 7%, follow.

To date during this ongoing experiment, researchers have been able to collect information about more than seven thousand malware samples designed specifically to hack connected devices.

According to experts, the reason behind the rise is simple: the IoT is fragile and exposed in the face of cybercriminals. The vast majority of smart devices are running operating systems based on Linux, making attacks on them easier because criminals can write generic malicious code that targets a huge number of devices simultaneously.

What makes the issue dangerous is its potential reach. According to industry experts, there are already more than 6 billion smart devices across the globe. Most of them do not even have a security solution and their manufacturers usually do not produce any security updates or new firmware.

This means there are millions and millions of potentially vulnerable devices – or maybe even devices that have been already compromised.

“The issue of smart device security is serious, and one that we should all be aware of. Last year showed that it is not just possible to target connected devices, but that this is a very real threat. We have seen a huge increase in IoT malware samples, but the potential is even greater. Apparently, high competition in the market of DDoS attacks is pushing attackers to search for new resources that will help them make increasingly powerful attacks. Botnet Mirai demonstrated that smart devices can give cybercriminals what they need, with the number of devices they can target now reaching billions. Various analysts have predicted that by 2020, this could grow to 20-50 billion devices,” said Vladimir Kuskov, security expert, Kaspersky Lab.

READ:  PH is most active country on social media

In order to protect your devices, Kaspersky Lab security experts advise the following:

  1. If you don’t need to, do not access your device from an external network

  2. Disable all network services you don’t need to use the device

  3. If there is a standard or universal password that cannot be changed, or the preset account cannot be deactivated, disable the network services in which they are used, or close access to external networks

  4. Before using the device, change the default password, and set a new one

  5. Regularly update the device’s firmware to the latest version – if possible.

To learn more about IoT attacks, head to

Related Posts

New Russian-speaking hacking group hunts for finan... Kaspersky Lab researchers identified a new series of targeted attacks against at least 10 financial organizations in multiple regions including Russia...
Privacy Commission advisory on Yahoo breach The National Privacy Commission (NPC) reiterated the recommendations of Yahoo and cybersecurity experts to Yahoo users to change their passwords on th...
Should you or shouldn’t you use Bitcoin? With the growing popularity of Bitcoin in the Philippines, experts from Kaspersky Lab urges Filipinos to learn its benefits and risks before using the...
91.1% of ICS hosts have vulnerabilities that can b... To minimize the possibility of a cyber-attack, Industrial Control Systems (ICS) are supposed to be run in a physically isolated environment. However, ...
SMBs increasingly attractive targets for identity ... Personal data is now considered an extremely valuable commodity for cyber-criminals. This new underworld currency can be used for a host of malicious ...
Kaspersky uncovers advanced cyber-espionage operat... Kaspersky Lab has uncovered one of the most advanced global cyber-espionage operations to date. “The Mask” (aka Careto) is an advanced Spanish-languag...
Study reveals surge in Java exploit attacks to 14.... The number of attacks using Java exploits from September 2012 to August 2013 amounted to 14.1 million – one third more than in the same period in 2011...
Top advice for startups, from the Security Startup... By Ilya Kuznetsov, Head of Strategy Development, Deputy CTO, Kaspersky Lab It’s been three to four years since Eric Ries’ “Lean Startup”, Steve Bla...
DarkMatter poll reveals 48% of orgs still lack key... DarkMatter, a cyber security firm headquartered in the UAE, found that 48% of respondents to its DarkMatter Cyber Security Poll say their organization...
Malware holds Android devices for ransom Symantec has observed what it believes is the first ransomware threat targeting mobile devices.  The security expert warns that a new threat of FakeAV...
About the Author

Leave A Response