Exhibit A came Monday from researchers at security training institute Sans, which unearthed a Bitcoin-mining trojan that has infected DVRs. The researchers found the infection while researching the source of an automated script they observed scanning the Internet for data storage devices made by Synology. The researchers eventually found that the bot ran on a DVR with an ARM processor but didn't know much else. They later determined it was part of a Bitcoin miner that took control of DVRs used to record video from security cameras, most likely by exploiting an exposed telnet port and a default root password of "12345." Samples of the malware are here. The password to access the binaries is "infected."
On Tuesday, Sans researchers uncovered evidence that the binaries can also infect routers, even when they're configured to provide network address translation (NAT), which can help lock down the security of devices on a network.
Internet of things is a big security mess
Posted on Thursday, April 03 2014 @ 12:34 CEST by Thomas De MaesschalckSecurity researchers warn that the internet of things is the next treasury trove for malware creators. Recently there's been an upsurge in malware targeting routers and now the trend is spreading to digital video recorders (DVRs). ARS Technica writes researchers just unearthed a piece of malware that targets DVRs to infect them with a Bitcoin trojan:
