Reaper: Calm Before the IoT Security Storm? (botnet reaper aka IoTroop)

https://krebsonsecurity.com ^ | October 17, 2017 | Brian Krebs

[ransomnote]

It’s been just over a year since the world witnessed some of the world’s top online Web sites being taken down for much of the day by “Mirai,” a zombie malware strain that enslaved “Internet of Things” (IoT) devices such as wireless routers, security cameras and digital video recorders for use in large-scale online attacks.

Now, experts are sounding the alarm about the emergence of what appears to be a far more powerful strain of IoT attack malware — variously named “Reaper” and “IoTroop” — that spreads via security holes in IoT software and hardware. And there are indications that over a million organizations may be affected already.

Reaper isn’t attacking anyone yet. For the moment it is apparently content to gather gloom to itself from the darkest reaches of the Internet. But if history is any teacher, we are likely enjoying a period of false calm before another humbling IoT attack wave breaks.

On Oct. 19, 2017, researchers from Israeli security firm CheckPoint announced they’ve been tracking the development of a massive new IoT botnet “forming to create a cyber-storm that could take down the Internet.” CheckPoint said the malware, which it called “IoTroop,” had already infected an estimated one million organizations.

[Squantos]

BTTT ...

[pigsmith]

Bfl

[FreedomPoster]

My number of IoT devices is quite small for this reason. And besides, why does my refrigerator, washing machine, or light bulbs need to access the Internet, really? I have a Nest thermostat is about it, and I don’t let it talk to the Internet.

I do worry a little about AT&T’s router, and have considered upgrading to something light commercial grade, like a Ubiquiti UniFi Security Gateway to go with the WAP I’ve had for a while. And if I did add IoT stuff around the house, I’d darn sure VLAN it off from the home network, at minimum.