Practical Internet of Things Security
上QQ阅读APP看书,第一时间看更新

Authentication attacks

Unfortunately, weak and default passwords continue to provide delicious targets to attackers. The Mirai Botnet in late 2016 was formed by exploiting IP cameras and internet router equipment default passwords. Mirai was open source with the ability to add new authentication or application exploits to create new Botnets or add to existing ones (https://www.wired.com/2016/12/botnet-broke-internet-isnt-going-away/). Authentication attacks can be bolstered by weak processes associated with bootstrapping devices onto a network or by sharing credentials across many devices on the network.