Security Architecture, Endpoint/Device Security, IoT, Network Security, Network Security, Threat Management, Malware, Endpoint/Device Security, Endpoint/Device Security, Endpoint/Device Security

Hacked in 98 seconds: Expert’s camera rapidly infected by IoT malware

A security expert who hooked up an Internet-connected surveillance camera for research purposes reported via Twitter on Friday that the device was compromised by IoT malware after just 98 seconds of being online.

According to Robert Graham, owner of consulting company Errata Security, the Wi-Fi camera – from JideTech – was infected by a malicious program similar in nature to the Mirai IoT botnet malware, which since September has been used to launch DDoS attacks against multiple targets, including the Domain Name System service provider Dyn.

To limit the damage of any possible infection, Graham leveraged a Raspberry Pi as router and firewall to isolate the camera from his home network, and also limited outgoing traffic before activating the device. According to Graham, after the initial stage of infection, the malware connected out to download the full virus, and then began firing off malicious packets in hopes of victimizing additional device-owners.

Bradley Barth

As director of multimedia content strategy at CyberRisk Alliance, Bradley Barth develops content for online conferences, webcasts, podcasts video/multimedia projects — often serving as moderator or host. For nearly six years, he wrote and reported for SC Media as deputy editor and, before that, senior reporter. He was previously a program executive with the tech-focused PR firm Voxus. Past journalistic experience includes stints as business editor at Executive Technology, a staff writer at New York Sportscene and a freelance journalist covering travel and entertainment. In his spare time, Bradley also writes screenplays.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.