Five ways attackers can create havoc in smart homes
![Internet of Things](/rails/active_storage/representations/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBNkdHRGc9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--09228b0e6dffaba2ec904601b4ac5e6bf1ea76e1/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdCem9MWm05eWJXRjBTU0lJYW5CbkJqb0dSVlE2QzNKbGMybDZaVWtpRFRjMU1IZzBOVEJlQmpzR1ZBPT0iLCJleHAiOm51bGwsInB1ciI6InZhcmlhdGlvbiJ9fQ==--9a8cb233bbd899661209fac1218cb930366c2398/internet_of_things_4129218_1920.jpg)
New research from security firm Trend Micro suggests that some devices found in the average home are more of a risk than others when it comes to cyber attacks, there are still plenty of ways for attackers to create havoc.
According to Trend Micro’s IoT Device Security: Locking Out Risks and Threats to Smart Homes report, the number of smart home devices is predicted to increase globally by almost 17% every year until 2023.
As homes become more connected, it makes sense to understand what threats these connections may bring, and how to prevent them from happening.
But why would attackers want to target smart home devices? The research suggests motives such as burglaries, cyber stalking, botnet creation, cryptocurrency mining hubs, theft of personal information or financial information – the list is broad and almost endless.
Here are five findings from the research:
1. Smart locks unlock the house for intruders to easily enter; lock out users or residents and block the house remotely, or change the lock password remotely
2. Smartwatches spoof the user’s smartphone from the smartwatch; steal the user’s health data; and sends fake text messages from the smartwatch
3. Smart toys record the voices of the toys players and leak the recordings online, or use the toy to gain access to the home network
4. Smart vacuums track the home layout or monitor room activities remotely which can lead to planning further activities and movement
5. Home gateways can connect to a fake or malicious website to download malware, steal personal information, or control connected devices remotely.
“Individually many of the attacks mentioned above can be overlooked as harmless by many users. However, once a device or system has been compromised, hackers can strategise and formulate a combination of actions to escalate their attacks in hopes of exacting direr consequences,” the report says.
Take the humble connected robot vacuum cleaner for example.
“Thinking that the device is connected only to the home network, the owner of the smart home does not fear exposure through the smart robot vacuum cleaner. In truth, however, the vacuum’s Universal Plug and Play (UPnP) function automatically connect to the home router, thereby exposing it to the internet.”
“With no security measures in place against such an exposure, attackers are free to compromise the device as part of their campaign. Once the vacuum is compromised, at the outset the hackers use the device to familiarise themselves with the layout of the house, and then they move laterally to compromise other devices in the network. Using a combination of different possible actions and compromised devices inside the home, the hackers can strategise and plan a number of different attacks.”
So what can users do about it? The report suggests the following actions:
1. Patch vulnerabilities. Timely patches and firmware updates are two initial actions users can take since updates are usually related to security issues. Users can opt to enable the auto-update feature on supported devices to ensure that updates are applied as soon as they become available.
2. Change default settings and passwords. When users go through the settings of their devices one by one, they can take the opportunity to make necessary modifications to make the devices more secure. They should change the default or easy-to-guess passwords immediately, and use unique and strong passwords for multiple accounts. In setting up the devices, users should avoid using personally identifiable information, especially with the router settings.
3. Isolate devices. Users should also consider implementing network segmentation for certain devices and isolating them from the entire home network. This is especially needed for vulnerable devices that cannot be patched and yet cannot be replaced or removed by users.
source securitybrief
Industry: Cyber Security & IoT / Internet of Things
![Banner Default Image](https://www.dclsearch.com/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBdytMRGc9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--683221fba4088f48e5f9c99e2719b73064c09cee/banner-default.jpg)
Latest Jobs
-
- Network & Security Consultant
- Spain
- Upto €54000 per year and benefits
-
Senior Network & Security Engineer to join a Managed Network & Security Team in Europe. In this critical role, you will: Play a pivotal role in managing and securing network infrastructure across datacenters, customer connections, and on-premise deployments. Proactively monitor network and security devices, analyse incidents, and implement solutions to ensure optimal performance and security. Collaborate with colleagues and customers to troubleshoot issues, troubleshoot outages, and implement effective resolutions. Lead and participate in network system installations for new facilities and expansions. Develop and maintain network infrastructure procedures, recommend technical strategies, and propose improvements to enhance network capabilities. Stay up-to-date on the latest network and security technologies and trends. Work as part of a collaborative international team, contributing to team presentations and knowledge sharing. To be successful, you'll need: Proven expertise in Cisco network solutions (CCNP R&S/Sec/Wireless preferred)for both BAU and project work. In-depth knowledge of network security principles and experience with Fortinet firewalls. Experience deploying and managing large, complex network infrastructure (routing, switching, wireless, security). Solid understanding of ITIL v3 framework for incident, change, and problem management. Excellent troubleshooting skills with experience using Wireshark or similar protocol analysers. Strong communication and teamwork skills, with the ability to work independently and collaborate effectively.
-
- Security Analyst - Internal role. London commutable. £50,000
- London
- £50,000
-
Security Analyst - Internal role. London commutable opportunity. Operational Security - Investigate, escalate and proactively work to ensure household name remains protected. Project Security - Coordinate, log change requests with project delivery teams to meet security requirements Policy / compliance - work with team to aid in uplifting these as and where needed This role is role to investigate, escalate and proactively work to protect a globally recognised brand. You must have current hands on operational analytical security experience with Microsoft technology stack Someone with a SOC Analyst / security engineering background would be well suited. This position will join a small team and would suit someone that has broad experience across the security threat landscape. Experience / knowledge across industry GRC standards such NIST, ISO27001 etc would be advantageous. You will work across multiple teams proactively working to secure the business. Must be able to commute to Central London 3 days a week. Visa sponsorship not available Apply today to find out more.
-
- Network & Security Consultant
- Romania
- €54000 plus benefits
-
Senior Network & Security Engineer to join a Managed Network & Security Team in Europe. In this critical role, you will: Play a pivotal role in managing and securing network infrastructure across datacenters, customer connections, and on-premise deployments. Proactively monitor network and security devices, analyse incidents, and implement solutions to ensure optimal performance and security. Collaborate with colleagues and customers to troubleshoot issues, troubleshoot outages, and implement effective resolutions. Lead and participate in network system installations for new facilities and expansions. Develop and maintain network infrastructure procedures, recommend technical strategies, and propose improvements to enhance network capabilities. Stay up-to-date on the latest network and security technologies and trends. Work as part of a collaborative international team, contributing to team presentations and knowledge sharing. To be successful, you'll need: Proven expertise in Cisco network solutions (CCNP R&S/Sec/Wireless preferred) for both BAU and project work. In-depth knowledge of network security principles and experience with Fortinet firewalls. Experience deploying and managing large, complex network infrastructure (routing, switching, wireless, security). Solid understanding of ITIL v3 framework for incident, change, and problem management. Excellent troubleshooting skills with experience using Wireshark or similar protocol analysers. Strong communication and teamwork skills, with the ability to work independently and collaborate effectively.
-
- Network & Security Consultant
- Hungary
- Upto €54000 per year and benefits
-
Senior Network & Security Engineer to join a Managed Network & Security Team in Europe. In this critical role, you will: Play a pivotal role in managing and securing network infrastructure across datacenters, customer connections, and on-premise deployments. Proactively monitor network and security devices, analyse incidents, and implement solutions to ensure optimal performance and security. Collaborate with colleagues and customers to troubleshoot issues, troubleshoot outages, and implement effective resolutions. Lead and participate in network system installations for new facilities and expansions. Develop and maintain network infrastructure procedures, recommend technical strategies, and propose improvements to enhance network capabilities. Stay up-to-date on the latest network and security technologies and trends. Work as part of a collaborative international team, contributing to team presentations and knowledge sharing. To be successful, you'll need: Proven expertise in Cisco network solutions (CCNP R&S/Sec/Wireless preferred) for both BAU and project work. In-depth knowledge of network security principles and experience with Fortinet firewalls. Experience deploying and managing large, complex network infrastructure (routing, switching, wireless, security). Solid understanding of ITIL v3 framework for incident, change, and problem management. Excellent troubleshooting skills with experience using Wireshark or similar protocol analysers. Strong communication and teamwork skills, with the ability to work independently and collaborate effectively.