Maybe All Those Smart Gadgets And Appliances From China Arent Such A Smart IdeaBy Daisy Luther Apparently, those things may not be so smart after all because they played a big role in the cyber attack that took place last Friday.Security analysts believe that Fridays attack on popular websites such as Reddit, Twitter, Netflix, and Spotify was the first one carried out by hackers who used the Internet of Things. Heres how the Internet of Things works: Who else thinks that this is how Skynet got started? Maybe its just me. The massive attack took down the Internet across the country. The website Downdetector provided a map that shows how much of the US was affected: All of the companies involved use Dyn, a cloud-basedInternet performance management company. Dyn was the target of the attack, and that, in turn, affected other companies. Dyn is sort of like a phone book that directs users to the Internet address of the website. On Friday a distributed denial of service attack, (DDoS) affected Dyn by sending thousands of messages at the same time, which overwhelmed the service. Security companyFlashpoint said it had confirmed that the attack used botnets infected with the Mirai malware. From their site: Flashpoint has confirmed that some of the infrastructure responsible for the distributed denial-of-service (DDoS) attacks against Dyn DNS were botnets compromised by Mirai malware. Mirai botnets were previously used in DDoS attacks against security researcher Brian Krebs blog Krebs On Security and French internet service and hosting provider OVH. Mirai malware targets Internet of Things (IoT) devices like routers, digital video records (DVRs), and webcams/security cameras, enslaving vast numbers of these devices into a botnet, which is then used to conduct DDoS attacks. Flashpoint has confirmed that at least some of the devices used in the Dyn DNS attacks are DVRs, further matching the technical indicators and tactics, techniques, and procedures (TTPs) associated with previous known Mirai botnet attacks. It is unknown if the attacks against Dyn DNS are linked to the DDoS attacks against Krebs, OVH, or other previous attacks. Given the proliferation of the Mirai malware, the relationship between the ongoing Dyn DDoS attacks, previous attacks, and Anna_Senpai is unclear. Many of the devices involved come from Chinese manufacturers, with easy-to-guess usernames and passwords that cannot be changed by the user a vulnerability which the malware exploits. According to the BBC: Mirai scours the Web for IoT (Internet of Things) devices protected by little more than factory-default usernames and passwords, explained cybersecurity expert Brian Krebs, and then enlists the devices in attacks that hurl junk traffic at an online target until it can no longer accommodate legitimate visitors or users. The owner of the device would generally have no way of knowing that it had been compromised to use in an attack, he wrote. Mr Krebs is intimately familiar with this type of incident, after his website was targeted by a similar assault in September, in one of the biggest web attacks ever seenThat attack began around 8 p.m. ET on Sept. 20, and initial reports put it at approximately 665 Gigabits of traffic per second. Additional analysis on the attack traffic suggests the assault was closer to 620 Gbps in size, but in any case this is many orders of magnitude more traffic than is typically needed to knock most sites offline. (source) Im sure those easy passwords and vulnerabilities arent deliberate. China would never sneak Trojan horses into the USA, would they? Daisy Luther is a freelance writer and editor. Her website, wherethis article first appeared, offers information on healthy prepping, including premium nutritional choices, general wellness and non-tech solutions. You can follow Daisy onFacebookandTwitter, and you can email her atdaisy@theorganicprepper.ca 