FlagThis

The FBI has issued a warning regarding a new HiatusRAT malware campaign which is targeting web cameras and DVRs, particularly those made by Chinese manufacturers. The attackers are exploiting vulnerabilities like weak default passwords, and are using tools like Ingram and Medusa to gain unauthorized access. Once compromised the devices are used as proxies and converted into covert communication channels. This campaign is targeting IoT devices in the US, Australia, Canada, New Zealand, and the UK. System administrators are urged to limit the use of the affected devices or isolate them from the rest of the network to prevent further exploitation.

ImgSrc: securityonline.info

References:

• CyberInsider - FBI Warns of HiatusRAT Campaigns Targeting Web Cameras and DVRs - 18d
• @BleepingComputer - The FBI warned today that new HiatusRAT malware attacks are now scanning for and infecting vulnerable web cameras and DVRs that are exposed online. - 18d
• @screaminggoat - FBI advisory: The FBI released this Private Industry Notification (PIN) to highlight HiatusRAT scanning campaigns against Chinese-branded web cameras and DVRs. - 18d
• Security Affairs - The FBI warns of HiatusRAT scanning campaigns against Chinese-branded web cameras and DVRs - 18d
• Over Security - Cybersecurity news aggregator - Bleeping Computer - 18d
• Malware Analysis, News and Indicators - Latest topics - Vulnerable webcams, DVRs subjected to HiatusRAT intrusions - 18d
• Malware Analysis, News and Indicators - Latest topics - Vogons, Task Scams, HiatusRat, Cellebrite, Deloitte, Quantum, Aaran Leyland, and More - SWN #438 - 18d
• News | CSO Online - That cheap webcam? HiatusRAT may be targeting it, FBI warns - 18d
• Industrial Cyber - The Federal Bureau of Investigation (FBI) published Tuesday a Private Industry Notification (PIN) to spotlight HiatusRAT scanning campaigns. - 17d
• @cybernews - Malicious campaigns are attacking Chinese-branded IoT devices – web cameras and DVRs – to crack authentication. - 17d
• Vulnerability Archives ? Cybersecurity News - The FBI, in collaboration with CISA, has issued a new alert regarding the HiatusRAT malware campaign. The latest iteration of the campaign has shifted its focus to Internet of Things. - 17d

Classification:

• HashTags: HiatusRAT WebcamSecurity CyberThreat
• Company: FBI
• Target: IoT Devices
• Product: Webcams and DVRs
• Feature: Vulnerability Exploitation
• Type: Malware
• Severity: Major