• Iot Forum
  • About us
  • Write for us
  • Contact us
  • Newsletter signup
IOT News - Internet of Things
  • IoT Forum
  • Hardware
    • Networking
  • Smart Home
  • Digital Transformation
    • All
    • Artificial Intelligence
    • Blockchain IoT
    • Enterprise IoT
    • Industrial IoT
    • Machine Learning
    • Smart City
    Top 5 trends for API-powered digital transformation in 2021

    Top 5 trends for API-powered digital transformation in 2021

    ONE Tech Launches Edge AI that Embeds and Trains AI Models Directly on MCU’s

    ONE Tech Launches Edge AI that Embeds and Trains AI Models Directly on MCU’s

    Awake Security Advances AI-powered Security for Faster Threat Protection and Remediation

    BlackSky awarded IARPA contract to develop next generation artificial intelligence platform

    • Wearables
    • Artificial Intelligence
    • Machine Learning
    • Industrial IoT
  • Cloud
  • Security
  • 5G IoT
  • Cars
No Result
View All Result
  • IoT Forum
  • Hardware
    • Networking
  • Smart Home
  • Digital Transformation
    • All
    • Artificial Intelligence
    • Blockchain IoT
    • Enterprise IoT
    • Industrial IoT
    • Machine Learning
    • Smart City
    Top 5 trends for API-powered digital transformation in 2021

    Top 5 trends for API-powered digital transformation in 2021

    ONE Tech Launches Edge AI that Embeds and Trains AI Models Directly on MCU’s

    ONE Tech Launches Edge AI that Embeds and Trains AI Models Directly on MCU’s

    Awake Security Advances AI-powered Security for Faster Threat Protection and Remediation

    BlackSky awarded IARPA contract to develop next generation artificial intelligence platform

    • Wearables
    • Artificial Intelligence
    • Machine Learning
    • Industrial IoT
  • Cloud
  • Security
  • 5G IoT
  • Cars
No Result
View All Result
IOT News - Internet of Things
No Result
View All Result
Home Security

TrapX Security Identifies New Malware Campaign Targeting IoT Devices Embedded With Windows 7

As Microsoft declares it will no longer release new security patches for Windows 7, roughly 200 million devices worldwide are still running this now outdated operating system. Devices infected by the campaign may malfunction causing risk to operations and safety. The campaign uses malware from the Lemon_Duck PowerShell variant family.

IoTNews.com by IoTNews.com
February 7, 2020
in Security
0
TrapX Security Identifies New Malware Campaign Targeting IoT Devices Embedded With Windows 7
8
SHARES
39
VIEWS
Share on FBShare on TwitterShare on LinkedinReddit

TrapX Security, the global leader in cyber deception technology, has identified a new malware campaign specifically targeting IoT devices using Windows 7 at various global manufacturing sites. A new report from TrapX Research Labs details this campaign that uses a self-spreading downloader that runs malicious scripts as part of the Lemon_Duck PowerShell malware variant family. It has targeted a range of devices including smart printers, smart TVs and automated guided vehicles (AGVs) at specific manufacturer sites.

In January 2020, Microsoft ended all support for Windows 7, despite the estimated 200 million devices that are still running the out-of-date operating system (OS). This End of Life means there will be no more additional security patches, fixes or functions, leaving these IoT devices at an increased risk. The manufacturing sector faces large challenges due to its reliance on embedded devices running legacy OS. These devices cannot be updated easily, and most often need to be replaced in order to upgrade to new, more secure operating systems. The existence of devices running legacy OS leaves these networks open to the campaign causing risks to employee safety, disruption of production and, in some cases, loss of sensitive data.

TrapX’s report on this malware campaign does a deep dive into its capabilities and how it spreads throughout target networks. It found that the malware’s infection may cause IoT devices to malfunction, causing harm to workers on the manufacturing floor, delays in the supply chain and damage to the brand’s reputation. The report describes the compromised security of industrial equipment that could be life-threatening, as well as detailed forensics of the malware utilized in the campaign.

“This research is further proof of the growing complexity of security management as businesses adopt new technologies such as IoT and cloud while still maintaining legacy ones,” said Ori Bach, Chief Executive Officer of TrapX Security. “To remain effective, security products must be able to scale across the complex threat landscape.”

Main security takeaways from the report:

  • Window 7 End of Life indicates additional patches, fixes, or functions are not available to protect these devices from future threats.
  • Infiltration risks damage to safety, the supply chain and data loss, and, in extreme cases, cause a shutdown of the entire production network.
  • Devices from third-party vendors can enter the network pre-infected.
  • Further attacks are preventable if the proper cybersecurity controls are in place, including:

The report outlines anonymized case studies of real attacks and can serve as a guide for IT teams looking to better identify and mitigate the threat. To learn more about this campaign, download the New Malware Campaign Exploits Vulnerabilities in Embedded Devices Targets Manufacturing Sites Report from TrapX Research Labs.

About TrapX Research Labs
TrapX Research Labs is a pioneer and global leader in cyber deception technology. The TrapX DeceptionGrid rapidly detects, deceives, and defeats advanced real-time cyber-attacks and human attackers in real-time. The DeceptionGrid provides automated, highly accurate insight into malicious activity unseen by other forms of cybersecurity. By deploying DeceptionGrid, users can create proactive security to fundamentally halt the progression of an attack

JOIN OUR IoT COMMUNITY
IoTForums.com
×
Continue to iotForums.com
Internet of Things platforms, projects, development, devices & support forum
for developers and enthusiasts
Tags: iot devicesiot securitymalwaresecurity
Share4Tweet2ShareShare
Previous Post

Carrier Selects AWS as its Cloud Provider to Drive Digital Transformation

Next Post

Semtech's LoRa Devices Detect Abnormal Energy Use in Cities

Related Posts

AWS Announces General Availability of Amazon Fraud Detector

ExtraHop Threat Research Team Finds One in Three IT Environments Vulnerable to Ripple20 Threat

by IoTNews.com
September 11, 2020
0

SEATTLE: ExtraHop, the leader in cloud-native network detection and response, today issued a report warning of the potential impact of...

Awake Security Advances AI-powered Security for Faster Threat Protection and Remediation

Awake Security Advances AI-powered Security for Faster Threat Protection and Remediation

by IoTNews.com
July 24, 2020
0

Awake Security, the only advanced network detection and response company that delivers answers, not alerts, today announced platform enhancements that...

Sequitur Labs Launches EmSPARK 2.0 Security Suite for Critical IoT Device Protection

Sequitur Labs Launches EmSPARK 2.0 Security Suite for Critical IoT Device Protection

by IoTNews.com
July 22, 2020
0

Sequitur Labs today debuted the next generation of its comprehensive approach to embedded system security with the launch of EmSPARK™...

IoT Forum Discussions

Realtek RTL8722DM Arduino Compatible WiFi + BLE IoT development board
Realtek RTL8722DM Arduino Compatible WiFi + BLE IoT development board

Realtek's RTL8722DM development board has recently added support for the Arduino IDE. It is an IoT-ready MCU powered by an ARM Cortex-M4 core at up to 200MHz coupled with a Cortex-M0 core at up to 20MHz. It is specially designed to be pin-compatible with the Arduino UNO, can be programmed using the Arduino IDE and supports most of the Arduino base examples and expansion boards. In addition to the standard MCU... Realtek RTL8722DM Arduino Compatible WiFi + BLE IoT development board [...]

Happy CNY Eink

Wish everybody has good luck in the coming year!!! The project is made of E-ink screen, RTL8722_mini and a buzzer. [...]

MicroPython for IoT?
MicroPython for IoT?

MicroPython is a platform if you are sick of traditional embedded system development. Let us play together. RTL8722DM MicroPython SDK. MicroPython SDK is the first time Ameba combined python and c language to make up an SDK. Also, the runtime debug is supported. Please, Log in or Register to view URLs content! Please, Log in or Register to view URLs content! [...]

SUBSCRIBE TO OUR FREE NEWSLETTER
* we never share your e-mail with third parties.
SUBSCRIBE NOW

Categories

  • 5G IoT
  • Artificial Intelligence
  • Blockchain IoT
  • Cloud Computing
  • Connected Car
  • Digital Transformation
  • Enterprise IoT
  • Industrial IoT
  • IoT Hardware
  • Machine Learning
  • Networking
  • Security
  • Smart City
  • Smart Home
  • Wearables

Stay Connected with IoTNews

IOT News - Internet of Things

© 2020 IoTNews.com

Navigate Site

  • Home
  • About us
  • Write for us
  • Contact Us
  • Newsletter signup

Follow Us

No Result
View All Result
  • IoT Forum
  • Hardware
    • Networking
  • Smart Home
  • Digital Transformation
    • Wearables
    • Artificial Intelligence
    • Machine Learning
    • Industrial IoT
  • Cloud
  • Security
  • 5G IoT
  • Cars

© 2020 IoTNews.com