IBM X-Force Research: Weaponizing the Internet of Things

It is widely known that cybercriminals are populating botnets with easily exploitable Internet of Things (IoT) devices such as security cameras, webcams and DVRs. With the proliferation of IoT devices accelerating significantly — expected to account for more than two-thirds of the 34 billion internet-connected devices projected by 2020 — it is vital that organizations and consumers look to implement IoT security best practices to combat these evolving threats.

Read this exclusive IBM X-Force report to learn:

How DDoS attacks and botnets such as Mirai can wreak havoc on networks and compromise sensitive data;
What other malicious purposes thingbots, or weaponized IoT devices, serve besides botnet DDoS attacks; and
What consumers and businesses can do to prevent their IoT devices from becoming part of a botnet.

Download the complete report: Weaponizing the Internet of Things

Security Intelligence Staff

Phishing kit trends and the top 10 spoofed brands of 2023

4 min read - The 2024 IBM X-Force Threat Intelligence Index reported that phishing was one of the top initial access vectors observed last year, accounting for 30% of incidents. To carry out their phishing campaigns, attackers often use phishing kits: a collection of tools, resources and scripts that are designed and assembled to ease deployment. Each phishing kit deployment corresponds to a single phishing attack, and a kit could be redeployed many times during a phishing campaign. IBM X-Force has analyzed thousands of…

Grandoreiro banking trojan unleashed: X-Force observing emerging global campaigns

16 min read - Since March 2024, IBM X-Force has been tracking several large-scale phishing campaigns distributing the Grandoreiro banking trojan, which is likely operated as a Malware-as-a-Service (MaaS). Analysis of the malware revealed major updates within the string decryption and domain generating algorithm (DGA), as well as the ability to use Microsoft Outlook clients on infected hosts to spread further phishing emails. The latest malware variant also specifically targets over 1500 global banks, enabling attackers to perform banking fraud in over 60 countries…

A spotlight on Akira ransomware from X-Force Incident Response and Threat Intelligence

7 min read - This article was made possible thanks to contributions from Aaron Gdanski.IBM X-Force Incident Response and Threat Intelligence teams have investigated several Akira ransomware attacks since this threat actor group emerged in March 2023. This blog will share X-Force’s unique perspective on Akira gained while observing the threat actors behind this ransomware, including commands used to deploy the ransomware, active exploitation of CVE-2023-20269 and analysis of the ransomware binary.The Akira ransomware group has gained notoriety in the current cybersecurity landscape, underscored…

Security Intelligence

{{title}}

{{title}}

{{title}}

Topics

More from Advanced Threats

Phishing kit trends and the top 10 spoofed brands of 2023

Grandoreiro banking trojan unleashed: X-Force observing emerging global campaigns

A spotlight on Akira ransomware from X-Force Incident Response and Threat Intelligence

Topic updates