Research notes amount of malware targeting smart devices more than doubled in 2017

Posted on Jul 7 2017 - 2:59pm by Upgrade Staff

The total number of malware samples targeting smart devices has reached more than 7,000, with over half of these emerging in 2017, according Kaspersky Lab’s researchers. With over 6 billion smart devices being used across the globe, people are increasingly being put at risk from malware targeting their connected lives.

Kaspersky Lab_Smart Devices.png

Smart devices – such as smartwatches, smart TVs, routers, and cameras – are connecting to each other and building the growing Internet of Things (IoT) phenomenon, a network of devices equipped with embedded technology that allows them to interact with each other or the external environment.

Because of the large number and variety of devices, the IoT has become an attractive target for cybercriminals. By successfully hacking IoT devices criminals are able to spy on people, blackmail them, and even discreetly make them their partners in crime. What’s worse, botnets such as Mirai and Hajime have indicated that the threat is on the rise.

Kaspersky Lab’s experts have conducted research into IoT malware to examine how serious the risk is. They have set up honeypots – artificial networks, which simulate the networks of different IoT devices (routers, connected cameras etc.) to observe malware attempting to attack their virtual devices.

They did not have to wait long – attacks using known and previously unknown malicious samples started almost immediately after the honeypot was set up.

Most of the attacks registered by the company’s experts targeted digital video recorders or IP cameras (63%), and 20% of hits were against network devices, including routers, and DSL modems, etc. About 1% of targets were people’s most common devices, like printers and smart home devices.

China (17%), Vietnam (15%), and Russia (8%) emerged as the top-3 countries with attacked IoT devices, each presenting a large number of the infected machines. Brazil, Turkey and Taiwan – all at 7%, follow.

To date during this ongoing experiment, researchers have been able to collect information about more than seven thousand malware samples designed specifically to hack connected devices.

According to experts, the reason behind the rise is simple: the IoT is fragile and exposed in the face of cybercriminals. The vast majority of smart devices are running operating systems based on Linux, making attacks on them easier because criminals can write generic malicious code that targets a huge number of devices simultaneously.

What makes the issue dangerous is its potential reach. According to industry experts, there are already more than 6 billion smart devices across the globe. Most of them do not even have a security solution and their manufacturers usually do not produce any security updates or new firmware.

This means there are millions and millions of potentially vulnerable devices – or maybe even devices that have been already compromised.

“The issue of smart device security is serious, and one that we should all be aware of. Last year showed that it is not just possible to target connected devices, but that this is a very real threat. We have seen a huge increase in IoT malware samples, but the potential is even greater. Apparently, high competition in the market of DDoS attacks is pushing attackers to search for new resources that will help them make increasingly powerful attacks. Botnet Mirai demonstrated that smart devices can give cybercriminals what they need, with the number of devices they can target now reaching billions. Various analysts have predicted that by 2020, this could grow to 20-50 billion devices,” said Vladimir Kuskov, security expert, Kaspersky Lab.

In order to protect your devices, Kaspersky Lab security experts advise the following:

  1. If you don’t need to, do not access your device from an external network

  2. Disable all network services you don’t need to use the device

  3. If there is a standard or universal password that cannot be changed, or the preset account cannot be deactivated, disable the network services in which they are used, or close access to external networks

  4. Before using the device, change the default password, and set a new one

  5. Regularly update the device’s firmware to the latest version – if possible.

To learn more about IoT attacks, head to

Related Posts

NetTraveler is back with new tricks Kaspersky Lab researchers recently announced a new attack vector of NetTraveler, an advanced persistent threat that has already infected hundreds of h...
Companies actively using cloud, big data realize h... Organizations actively using cloud, mobility, big data or security technologies are experiencing up to 53 percent higher revenue growth rates than tho...
Fortinet launches world’s first terabit firewall a... Fortinet announced new solutions that expand Fortinet’s firewalls for enterprise, data center, and service provider customers. The FortiGate 3980E is ...
PAL adopts VMWare AirWatch, eyes to improve flight... The country’s flag carrier, Philippine Airlines (PAL), collaborated with cloud infrastructure provider VMWare to adopt VMWare AirWatch to create an El...
10 IT security tips for SMBs By Jennifer Saber Senior Vice President and Head of Information Technology Kaspersky Lab North America Starting a business has never been for the f...
Kaspersky Lab teams with Merchant Risk Council to ... Kaspersky Lab has become the latest company to join forces with the Merchant Risk Council as Premier Solution Provider. The move further demonstrates ...
Most victims of Hellsing malware were in PH: Kaspe... Close to 20 organizations, mostly government and diplomatic entities, are targeted by the Hellsing malware, which has been active since at least 2012 ...
Kaspersky Lab uncovers hacked servers used by Laza... While researching the latest activities of the infamous cybercrime group Lazarus, Kaspersky Lab has uncovered a number of compromised servers being us...
JASK ASOC platform launched with enhanced JASK Nav... JASK, provider of the first Autonomous Security Operations Center (ASOC) platform, is capturing industry demand with new features centered around ente...
What we can do about ransomware – today and tomorr... By Alan Zeichick Principal Analyst, Camden Associates Ransomware is a huge problem that’s causing real harm to businesses and individuals. Tec...
About the Author

Leave A Response