IOT devices affecting both Android and Apple devices are almost daily .”
Tenable sees attackers demonstrably trying to compromise IoT devices more and more often . One example is the new variant of the P2Pinfect botnet , discovered in December 2023 which specifically targets web-enabled devices , routers and other embedded systems .
“ This is just one of many examples – after all , botnet malware is now easily available as open source via criminal forums . Once infected , the IoT devices are integrated into the attackers ’ botnets via attack payloads , which are typically based on malware such as Mirai or Gafgyt , and then used for DoS attacks against attractive targets ,” he explains .
Industry standards and legal regulations have been introduced to improve the protection of IoT devices , such as The EU ’ s Cyber Resilience Act , which is currently going through council and imposes upon manufacturers of digital products a ‘ duty of care ’ which lasts a product ’ s lifetime .
Echoing sentiments shared by MEF , Bernard warns that companies should not be lulled into a false sense of security , that they are optimally protected just because they have ticked the right boxes on the right checklist .
“ Each business and facility is ultimately responsible for defining and implementing secure processes to reliably protect their infrastructures – including IoT devices ,” he says .
While no mobile operator is immune to security threats , digital ecosystems in the mobile sector significantly enhance the overall security of mobile technology .
mobile-magazine . com 113