xIoT Hacking Demonstrations & Strategies to Disappoint Bad Actors
summary
Six years of xIoT research claims huge exposure: about 50 billion devices, 50% use default passwords, and many run six‑year‑old or end‑of‑life firmware. Demonstrations show concrete exploits: a Hikvision camera is compromised by a downloaded Python script from Exploit‑DB to grab keys and install tools; a FANUC robot accepts anonymous FTP, lets an attacker download, edit and reupload a motion file and then crush a can; routers run persistent VPNFilter. Threats include Mirai botnets, Fronton and Quiet Exit pivoting with an average two year average dwell time.
AI-written summary · about
chapters (15)
- 0:00Start
- 0:09RSAConference 2023
- 1:39Disclaimer
- 5:03Internet-accessible xloT
- 7:02Research Stats
- 11:55Common xlot Attack Types
- 14:08RSOCKS
- 15:39Fronton
- 17:47QuietExit
- 19:43IoT Device Hacking Demo
- 34:22Network Device Hacking Snapshot
- 34:32VPNFilter
- 36:13Disappoint Bad Actors
- 45:01Apply What You Have Learned Today
- 46:40Summary
related talks
13mThe dark side of IoT
40mSecurity/Privacy in the IoT generation
23mSmart Devices Gone Rogue: IOT Vulnerabilities and Designing For Security
32mCommon Attacks on IoT Devices
40mInto the Mind of an IoT Hacker | How to Protect IoT Networks & Devices
42mCloudy With a Chance of Exploits: Compromising Critical Infrastructure Through IIoT Cloud Solutions
44mNight of the living vulnerabilities
23mCameras, CACs & Clocks: A Story of Millions of Interrogated and...