Hackers turn to connected devices to launch attacks

Cyber security experts warn that the rapid proliferation of cameras and other "Internet of Things" (IoT) devices may mean an increase in cyber attacks as the world - particularly the UAE - moves towards the concepts of "smart cities".
Such fears were starkly highlighted earlier in October, when hijackers used hundreds of thousands of Internet-connected household devices and cameras to launch a devastating cyber attack in which many popular websites, including Twitter, Netflix, Amazon and the New York Times were significantly slowed down or completely knocked offline.
In a separate incident, in September 145,000 hacked cameras were used to bring down security news website KrebsOnSecurity for over 24 hours.
"The Internet of Things has become a crucial part of our day-to-day activities, especially with the introduction of what we call smart cities, such as is the trend in Dubai and the UAE," said Mohammed Abukhater, Regional Director for the Middle East and North Africa at FireEye, a security company. "Aside from all of the good things the Internet of Things brings to us, such as cameras and connected devices ... all of them have a risk."
"Most people are not aware of the risk," he added. "But recent attacks have specifically targeted simple devices that are connected to the Internet. Those then can be utilised to attack more important or more sensitive websites or organisations."
Abukhater noted cyber criminals and hackers have increasingly turned to connected devices as platforms for their attacks, as they lack sophisticated security measures.
"These are simple devices that give benefits to people, but they are lacking security measures," he noted. "From a vendor's point of view, they need to quickly meet people's needs so they introduce easy-to-manage devices."
"These are good targets for attackers to use in many ways," he added. "Some of them can use them to generate massive amounts of junk data that can be directed to important websites, and overwhelm servers."
Abukhater noted that there is a variety of motives for such cyber attacks. In some cases, it could be politically motivated. In other cases, the primary motive could be theft. In one recent instance, hackers managed to overwhelm a jewellery shop's security system, allowing thieves to enter.
Additionally, Abukhater noted that the massive proliferation of Internet-enabled security cameras may mean an increase in cyber attacks in the UAE. According to market research company 6Wresearch, the market for surveillance cameras in the UAE will rise to $197.8 million by 2021.
"This shift puts us at risk of being targeted by hackers, for personal reasons, political reasons, or even state-sponsored attacks," he said.
"But the good thing here is that the government of the UAE and Dubai are putting very good protection measures," he added. "But you can never guarantee a 100 per cent secured environment against such hackers."
- bernd@khaleejtimes.com

Bernd Debusmann Jr.

bernd@khaleejtimes.com