IoT Malware Sees 4X Rise as Compared to Last Year, and That's in H1 2022 Alone

Kaspersky Lab has released a new study on the global IoT ecosystem, which states that non simply the number of threats have gone up significantly, but cybercriminals have also started adopted new means to infect IoT devices with malware. Kaspersky Lab'due south Secure Listing blog has reported an approximately four-fold growth in the number of malware targeting IoT devices in just the first one-half of 2018 compared to the figures recorded in 2017.

As per the report, cybercriminals have now resorted to developing new methods to suspension past the security protocol of IoT devices, and 1 such culling method that has caught on quickly is the Reaper botnet.

IoT Malware Sees 4X Rise as Compared to Last Year, and That's in 2018 First Half Alone

The Reaper botnet, which exploits a host of well-known vulnerabilities that are difficult to patch, allows cybercriminals to infect IoT devices at a much faster rate and is currently known to have afflicted at to the lowest degree 2 1000000 IoT devices across the earth. When it comes to geographical distribution of malware-infected IoT devices, Brazil leads the pack with a hefty 23% of IoT devices that were targeted by Telnet password attacks.

IoT Malware Sees 4X Rise as Compared to Last Year, and That's in 2018 First Half Alone

Kaspersky Lab's report states that cracking the Telnet countersign is yet a preferred method of delivering a malware vector, as the visitor'south team recorded 3x more Telnet attacks than all other types of malware attacks combined. Attacks on IoT devices are also on the rise, and DDoS attacks facilitated by Trojans predominantly from the Mirai family have also surged, which can bargain damages ranging from request denial to blocking an infected IoT device by its Isp, cryptomining and information theft amidst others.

The written report states that IoT devices are easier to infect compared to a traditional reckoner, primarily due to lack of a robust security infrastructure, complex firmware update process and lack of initiative from the user side to regularly update security settings.