Cloudy With a Chance of Exploits: Compromising Critical Infrastructure Through IIoT Cloud Solutions
summary
Cloud-managed IIoT router platforms can be hijacked end-to-end to get remote code execution on fleets, shown across three major vendors with lab demos and automated scripts. Attack paths: unclaimed-device registration via leaked MAC/IMEI, predictable MQTT topic IDs exploited after 175 attempts and stored XSS plus cloud tunnel abuse to trigger batch tasks. Tools: Python scripts, Shodan/Wigle enumeration, MQTT subscription and crafted config injection. Result: reproducible RCE at scale (thousands of devices possible), demonstrated in lab, recommendations and patches issued.
AI-written summary · about
chapters (11)
- 0:00Industrial IoT cloud risks
- 1:06Attack vectors overview
- 2:52IIoT devices and cloud platforms
- 5:20Cloud management components
- 7:05Asset registration flaws
- 12:03Weak MQTT broker security
- 21:09External API vulnerabilities
- 29:02Live exploit demo
- 30:49Recommendations for clients
- 34:01Key takeaways
- 35:49Q&A
related talks
25mTrust in the edge, trouble in the cloud
31mNext-Gen IoT Botnets 3: Bad Implementations of Good Cloud Platforms- 31mNext-Gen IoT Botnets 3: Bad Implementations of Good Cloud Platforms
49mxIoT Hacking Demonstrations & Strategies to Disappoint Bad Actors
23mSmart Devices Gone Rogue: IOT Vulnerabilities and Designing For Security
30mPractical Attack Vectors and Their Ideal Defensive Strategies for ICS & SCADA
13mThe dark side of IoT
47mTrend Micro's VP of security research reveals the latest IoT threats and how to combat them