3 ms·
It's just what they are. Routers and IoT devices exposed with telnet running and default credentials. It's probably mostly routers, but the botnet doesn't car
by justinsaccount 10y ago
It's just what they are. Routers and IoT devices exposed with telnet running and default credentials.
It's probably mostly routers, but the botnet doesn't care. If they can connect to you, send root\nroot or admin\nadmin and get a shell, they will.
- sp332 10y agoHow do you tell the difference between a router and some device sitting behind the router?
- bogomipz 10y agoOK I see, so the router the IoT devices are in back of as well as the IoT device have both been compromised. And the owners of the botnet have made sure that these IoT devices have proper NAT/PAT mappings on these routers.
- justinsaccount 10y agoNo.. separate incidents. People often forward ports to IoT devices or stick them on public interfaces in the first place.