Slashdot Mirror
New Mirai Malware Variant Targets Signage TVs and Presentation Systems (zdnet.com)
An anonymous reader quotes a report from ZDNet: Security researchers have spotted a new variant of the Mirai IoT malware in the wild targeting two new classes of devices -- smart signage TVs and wireless presentation systems. This new strain is being used by a new IoT botnet that security researchers from Palo Alto Networks have spotted earlier this year. The botnet's author(s) appears to have invested quite a lot of their time in upgrading older versions of the Mirai malware with new exploits. Palo Alto Networks researchers say this new Mirai botnet uses 27 exploits, 11 of which are new to Mirai altogether, to break into smart IoT devices and networking equipment. Furthermore, the botnet operator has also expanded Mirai's built-in list of default credentials, that the malware is using to break into devices that use default passwords. Four new username and password combos have been added to Mirai's considerable list of default creds, researchers said in a report published earlier today.
The purpose and modus operandi of this new Mirai botnet are the same as all the previous botnets. Infected devices scan the internet for other IoT devices with exposed Telnet ports and use the default credentials (from their internal lists) to break in and take over these new devices. The infected bots also scan the internet for specific device types and then attempt to use one of the 27 exploits to take over unpatched systems. The new Mirai botnet is specifically targeting LG Supersign signage TVs and WePresent WiPG-1000 wireless presentation systems.
The purpose and modus operandi of this new Mirai botnet are the same as all the previous botnets. Infected devices scan the internet for other IoT devices with exposed Telnet ports and use the default credentials (from their internal lists) to break in and take over these new devices. The infected bots also scan the internet for specific device types and then attempt to use one of the 27 exploits to take over unpatched systems. The new Mirai botnet is specifically targeting LG Supersign signage TVs and WePresent WiPG-1000 wireless presentation systems.
Don't use default password on anything that's connected to the internet? If you can print a serial number on the label, you can print a password on the label too!
I've abandoned my search for truth; now I'm just looking for some useful delusions.
Goa Tse - We Owned You Country !!!
Sorry Trump traitors.
Disable Javascript to turn off all of the lame paywall overlays with the threat of you have x number of free articles remaining. Text and images will still load fine.
What an oxymoron. If they can be compromized so easily then they cannot be very smart can they now?
Just imagine the political clout you would have if your virus has the ability to pop up displays of political blackmail on millions of devices around the world.
News agencies wouldn't air the material if you released it... but I mean, Imagine when now known pedophile Sir Jimmy Savile. In 1978 Johnny Rotten told the truth about the pedophile cult And he was blackballed from media afterwards.
Imagine if someone like Johnny Rotten had the ability to display heinous shit about top politicians all around the world? Wow! That might be worse than "national security" it might be the fate of the world as we know it in the hands of some poor schmuck with a few exploits and evidence.
TL;DR: Fuck off and die you pricks. I'm coming for you. I don't care about the shit you do, but get in my way and I will destroy all of you.
I'd wager a lot of these devices wind up implemented because someone in marketing just had to have a giant TV blasting their propaganda, and bought a gadget they saw advertised or inked some deal with a company who provided the gear "for free".
The latter is especially pernicious, I've helped implement one for a client that they just love because they can connect to the providers web site and upload their messages, and the device lays it out with a news/weather ticker (and advertising if it was "free").
It's pernicious because now you have a computer on your network that requires internet connectivity and accepts code and data from the outside over which you have zero control.
You can implement them safely, but it requires a lot of effort -- a private DMZ-type VLAN dedicated to these displays that can get to the internet but not to the rest of the network. A solution complicated by the fact that where they want to mount them has no wired LAN port but does wireless but can't work with the captive portal for guest access. And that's if the device isn't some dumb hybrid, requiring both local web access for some configuration *and* continuous connectivity to the internet for centrally pushed content.
Ergo, the security questions and complexity/effort of secure implementation get pushed aside so Karen in marketing can have her propaganda outlet.