IoT Device Security

[hodged]

Marai was just the beginning of the large scale attacks on IoT devices.  Has anyone heard the news about "Reaper" or know the differences and similarities between the two attack vectors used?

[LewisM]

Simply put, Marai attacked IoT devices by using default passwords. Reaper does not look at that, but instead is using 9 different vulnerabilities to gain access. Interesting thing about reaper is its size, last I heard it waa aomething like 20x the size of Marai. Thus far, I have not heard of any recorded attacks from reaper.

[Romualds]

Both are ways to attack IoT devices and to create botnets. It seems more and more IoT botnets are to be created, as IoT seem to be the "weakest link" in security nowadays.

[str12]

The 'S' in IoT stands for Security.