Connected Devices Expose Major Enterprise Cyber Risk in 2017

IT pros understand the dangers facing their companies, but don't have the necessary solutions [AB1] to address these new threats, including IoT malware, like Mirai. Last fall, Mirai was used to arm hundreds of thousands of webcams to attack the Internet infrastructure company Dyn.  The result? A near shutdown of the internet for millions of Americans trying to get to their favorite websites.

"Mirai demonstrated what the right malware could do if unleashed onto poorly configured or inadequately secured devices," said Paul Paget, Pwnie Express CEO. "When you consider the exploding number of connected devices, many with poorly configured or no security and the fact that security teams can't see these devices, it becomes clear that security programs need to shift spending to adapt more quickly."

Mirai made headlines globally and 84 percent of those surveyed admitted that Mirai changed their perception about threats from IoT devices. Yet, over 65 percent said they either haven't checked or don't know how to check their connected devices for Mirai. With Mirai and its inspired offshoots in the wild, determined attackers see the potential to use vulnerable connected devices for nefarious large-scale purposes and to target and compromise specific networks and companies.

Key report findings include:

• One in five of the survey respondents (20%) said their IoT devices were hit with ransomware attacks last year.
• 16% of respondents say they experienced Man-in-the-middle attacks through IoT devices.
• Devices continue to lend themselves to problematic configurations. The default network from common routers "linksys" and "Netgear" were two of the top 10 most common "open default" wireless SSID's (named networks), and the hotspot network built-in for the configuration and setup of HP printers - "hpsetup"- is #2.

In addition, survey respondents shared their top device threat concerns for 2017:

• Misconfigured healthcare, security, and IoT devices will provide another route for ransomware and malware to cause harm and affect organizations.
• Unresolved vulnerabilities or the misconfiguration of popular connected devices, spurred by the vulnerabilities being publicized by botnets, including Mirai and newer, "improved" versions, in the hands of rogue actors will compromise the security of organizations purchasing these devices.
• Mobile phones will be the attack vector of the future, becoming an extra attack surface and another mode of rogue access points taking advantage of unencrypted Netgear, AT&T, and hpsetup wireless networks to set up man-in-the-middle attacks.

The report is available on the Pwnie Express website and can be downloaded here.

Pwnie Express surveyed more than 800 IT security professionals and used data gathered from a wide range of businesses across industries including financial services, hospitality, retail, manufacturing, professional services, technology, healthcare, energy and more, to develop the IoET® report.

About Pwnie Express

Pwnie Express addresses the attack surface exposed by BYOD, IoT and connected devices in the enterprise. By continuously discovering, monitoring and assessing all devices on and around a company's network, Pwnie Express provides security professionals the ability to detect, assess and respond to device based threats, including misconfigured, unauthorized, and malicious devices. 

The Pwnie Express SaaS platform provides complete device coverage, including BYOD, IoT, rogue, and company-owned devices across the entire enterprise. To learn more about Pwnie Express visit www.pwnieexpress.com.

SOURCE Pwnie Express

Related Links

https://www.pwnieexpress.com