Brickerbot

[KG4CGC]

https://www.theregister.co.uk/2017/04/08/brickerbot_malware_kills_iot_devices/

Someone tell me what I should think about this. TIA.

[WØTKX]

https://www.youtube.com/watch?v=69fPof-ZTnU

[n2ize]

https://www.theregister.co.uk/2017/04/08/brickerbot_malware_kills_iot_devices/

Someone tell me what I should think about this. TIA.
Oh that's beautiful !!! Basically it writes random garbage from /dev/urandom to the devices virtual disc (memory partitions). Then it reformats the memory and dumps the routing table to /dev/null and then halts and reboots the device. When the device reboots it's basically a box of electronics that does nothing useful To fix it the memory disc) would have to be cleaned and the operating system reinstalled and reconfigured.

What to do ? First check to see if you have a router or device that uses Linux and has access to the busybox shell. Make sure you are not running the devices default password and change it to a password that would be difficult to determine via a brute force attack. Then disable access to the busybox shell, i.e. shut off telnet.

[NQ6U]

Since most device makers dumb down the networking controls, you should disable remote administration access unless you really know what you're doing.

[n2ize]

Since most device makers dumb down the networking controls, you should disable remote administration access unless you really know what you're doing.
Yep.

[WØTKX]

Telnet is just not a good thing anymore. Maybe on a closed network. We still use it for out "IoT" devices at work.
But they are NOT allowed on the IntErnet. Just our IntrANet.

You know' BacNet HVAC controls, bigass UPS devices, solar panels/inverters, etc., etc.
These things are pretty cool, actually. Our new HVAC control system is spiffy!

[n2ize]

I rarely use telnet these days except perhaps for running tests on servers.