Predictions made about the Internet of Things (IoT) now loom large. Soon, almost any device will be a viable candidate for network implementation, allowing companies to collect a host of data across thousands of interconnected machines. But no technology is without risk, and IoT-enabled devices have been targeted by malware. As noted by Naked Security, past targets range from Jeep Cherokees to Bluetooth-enabled skateboards. Now, malware creators have upped the ante with a ransomware-based attack on wearable devices. Is locking down user lives the next step for infected code?

IoT Threats Are Not Surprising

A December 2014 blog entry from Threatpost made it clear that this kind of IoT-based ransomware wasn’t entirely unexpected. Dino Dai Zovi, the hacker-in-residence at the New York University Polytechnic School of Engineering, argued that “we are going to see ransomware scale well in the Internet of Things.”

As part of a panel on cybercrime outlook through 2020, Dai Zovi and other experts argued that there’s a real future for vehicle-based ransomware, which would see cars kept locked unless drivers were willing to pay in bitcoin. While no real-life vehicular lock-downs have happened yet, CSO Online reported that researchers have now repackaged Android ransomware to work on Android Wear.

Using the Android.Simplocker malware, a team from Symantec was able to infect an Android-based smartphone as well as the linked smartwatch. The result? Both devices were rendered useless, and files on the watch’s SD card were encrypted. In other words, the proof of concept functioned just like typical ransomware but with a potentially larger reach — imagine the havoc if smart TVs refused to change channels or fridges demanded bitcoin payments to keep food cold. Fortunately, there have been no reports of IoT ransomware in the wild, but given the kind of tanker-sized network holes present in many new device rollouts, it’s only a matter of time.

Breaking the Bank

Is it possible to defend against this kind of attack? The short answer is no. Since phones and wearables are intended to sync smoothly and seamlessly, any updates — or malicious files — are pushed automatically to both devices, making it almost impossible to stop the spread of ransomware across a personal area network (PAN). There is some good news, however: According to Symantec researcher Kevin Savage, malware tends to rise and fall in two-year cycles, which suggests that “crypto ransomware growth is already at, or close to, its peak. This means it may soon plateau before finally entering a declining phase.”

What’s more, cybersecurity expert and Security Intelligence contributor Engin Kirda said that ransomware may be easier to defeat than previously thought. For example, Kirda found that 61 percent of ransomware apps only affected desktops, while just 35 percent actually deleted files and just 5 percent used encryption. More dangerous versions of ransomware such as Cyptolocker and Cryptowall, meanwhile, leverage encryption algorithms built into Windows, meaning it should be possible for virus tools to monitor selected behaviors like access to encryption libraries.

As tech giants push new wearable devices to market and make syncing these devices with existing smartphones ever more seamless, malware creators are looking for fresh avenues of attack. And while “ransomwear” may be the next trend for malicious actors, there’s hope it will fall quickly out of fashion as other opportunities knock and detection tools improve their rate of discovery.

More from

Cost of a data breach 2023: Geographical breakdowns

4 min read - Data breaches can occur anywhere in the world, but they are historically more common in specific countries. Typically, countries with high internet usage and digital services are more prone to data breaches. To that end, IBM’s Cost of a Data Breach Report 2023 looked at 553 organizations of various sizes across 16 countries and geographic regions, and 17 industries. In the report, the top five costs of a data breach by country or region (measured in USD millions) for 2023…

The Growing Risks of Shadow IT and SaaS Sprawl

4 min read - In today's fast-paced digital landscape, there is no shortage of apps and Software-as-a-Service (SaaS) solutions tailored to meet the diverse needs of businesses across different industries. This incredible array of options has revolutionized how we work, providing cost-effective and user-friendly tools that streamline tasks and boost productivity. However, this ever-expanding application ecosystem comes with its challenges: namely, shadow IT and SaaS sprawl. According to a recent study by Entrust, 77% of IT professionals are concerned about shadow IT becoming a…

Are you ready to build your organization’s digital trust?

4 min read - As organizations continue their digital transformation journey, they need to be able to trust that their digital assets are secure. That’s not easy in today’s environment, as the numbers and sophistication of cyberattacks increase and organizations face challenges from remote work and insider behavior. Digital trust can make your organization’s digital transformation stronger. A lack of digital trust can do irreparable harm. However, according to ISACA’s State of Digital Trust 2023 report, too many organizations struggle to define and implement…

Most organizations want security vendor consolidation

4 min read - Cybersecurity is complicated, to say the least. Maintaining a strong security posture goes far beyond knowing about attack groups and their devious TTPs. Merely understanding, coordinating and unifying security tools can be challenging. We quickly passed through the “not if, but when” stage of cyberattacks. Now, it’s commonplace for companies to have experienced multiple breaches. Today, cybersecurity has taken a seat in core business strategy discussions as the risks and costs have risen dramatically. For this reason, 75% of organizations…