FBI – Cyber Actors Use Compromised IoT Devices For Malicious Cyber Activities

On August 2, 2018 the Federal Bureau of Investigation (FBI) released Public Service AlertI-080218-PSA, entitled “Cyber Actors Use Internet of Things Devices as Proxies for Anonymity and Pursuit of Malicious Cyber Activities.” The PSA outlines how cyber criminals search for and compromise vulnerable Internet of Things (IoT) devices “for use as proxies or intermediaries for Internet requests to route malicious traffic for cyber-attacks and computer network exploitation. IoT devices, sometimes referred to as “smart” devices, are devices that communicate with the Internet to send or receive data. Cyber actors use the compromised device’s IP address to engage in intrusion activities, making it difficult to filter regular traffic from malicious traffic. Examples of targeted IoT devices include: routers, wireless radios links, time clocks, audio/video streaming devices, Raspberry Pis, IP cameras, DVRs, satellite antenna equipment, smart garage door openers, and network attached storage devices.  Full PSA at https://www.ic3.gov/media/2018/180802.aspx