Beware of IoT Botnet "Reaper"

HKCERT is aware that a security vendor has published a research on an IoT botnet, named "Reaper" or "IoTroop", which may have compromised million of IoT devices such as router. The operation of the botnet is similar to that of the infamous Mirai botnet which caused wide area Internet outage in US and Europe last year. HKCERT would like to advise individual users and organizations to secure their Internet enabled devices such as router, IP camera, CCTV etc. to avoid being infected, becoming part of the botnet and being abused in any attack. HKCERT has published guidelines on securing IoT devices for public reference:

• Buying and installing tips for Smart Device
• Mirai Malware Cleanup and Prevention

References:

1. Analysts discover monster ‘botnet’ enslaving 10,000 devices daily, and threatening global computer chaos
2. A New IoT Botnet Storm is Coming
3. A New IoT Botnet Storm is Coming (technical report)