introduction to mirai
play

Introduction to Mirai Luis Espinoza lespinoz@akamai.com Hardcoded - PowerPoint PPT Presentation

Oct 04, 2023 •654 likes •835 views

Introduction to Mirai Luis Espinoza lespinoz@akamai.com Hardcoded list of user/pass used by Mirai https://krebsonsecurity.com/wp-content/uploads/2016/10/IoTbadpass-Sheet1.pdf loader/src/headers/includes.h loader/src/headers/binary.h

  1. Introduction to Mirai Luis Espinoza lespinoz@akamai.com

  2. Hardcoded list of user/pass used by Mirai https://krebsonsecurity.com/wp-content/uploads/2016/10/IoTbadpass-Sheet1.pdf

  3. loader/src/headers/includes.h

  4. loader/src/headers/binary.h

  5. mirai/bot/ Bot in device

  6. dlr

  7. resolv.c

  8. main.c

  9. scanner.c Static user/pass

  10. scanner.c IP exceptions

  11. mirai/cnc/ Command-&-Control

  12. admin.go

  13. attack.go • Attack Name: “udp”, “vse”, “dns”, “syn”, “ack”, “stomp”, “greip”, “greeth”, “udpplain”, “http” • Attack targets: “Comma delimited list of target prefixes Ex: 192.168.0.1 Ex: 10.0.0.0/8 Ex: 8.8.8.8,127.0.0.0/29” • Attack Duration: “Duration must be between 0 and 3600 seconds” • Flags: “len”, “rand”, “tos”, “ident”, “sport”, “dport”, “domain” …

  14. main.go

  15. mirai/tools/scanListen.go Bot scan report

  16. Problem of volume • The “Internet of Things” is exploding. It is made up of billions of “smart” devices—from miniscule chips to mammoth machines—that use wireless technology to talk to each other (and to us). Our IoT world is growing at a breathtaking pace, from 2 billion objects in 2006 to a projected 200 billion by 2020 . 1 That will be around 26 smart objects for every human being on Earth! 1 IDC, Intel, United Nations. • * http://www.intel.com/content/www/us/en/internet-of-things/infographics/guide-to-iot.html

  17. Comments? Thank you!

Recommend

Next-Gen Mirai Balthasar Martin <balthasar@srlabs.de> Fabian Brunlein

Next-Gen Mirai Balthasar Martin <balthasar@srlabs.de> Fabian Brunlein

Next-Gen Mirai Balthasar Martin <balthasar@srlabs.de> Fabian Brunlein <fabian@srlabs.de> SRLabs Template v12 Mirai and IoT Reaper botnets exploited open Telnet and other known vulnerabilities Mirai botnet Reaper botnet Known

306 views • 26 slides
Mirai and IoT Botnet Analysis Robert Graham http://blog.erratasec.com @ErrataRob #RSAC What

Mirai and IoT Botnet Analysis Robert Graham http://blog.erratasec.com @ErrataRob #RSAC What

#RSAC SESSION ID: SESSION ID: HTA-W10 Mirai and IoT Botnet Analysis Robert Graham http://blog.erratasec.com @ErrataRob #RSAC What this talk will cover? Brief overview of Mirai The cameras themselves Step by step from infection to attacks

962 views • 63 slides
Present status of the MIRAI Program; towards a persistent 1.3 GHz NMR and DC feeder cables H.

Present status of the MIRAI Program; towards a persistent 1.3 GHz NMR and DC feeder cables H.

IEEE CSC & ESAS SUPERCONDUCTIVITY NEWS FORUM (global edition), February 2020. Plenary presentation PT-4 given at ACASC/Asian-ICMC/CSSJ Joint Conference, 6-9 January 2020, Okinawa, Japan. Present status of the MIRAI Program; towards a

910 views • 45 slides
Understanding the Mirai Botnet Manos Antonakakis , Tim April , Michael Bailey ,

Understanding the Mirai Botnet Manos Antonakakis , Tim April , Michael Bailey ,

Understanding the Mirai Botnet Manos Antonakakis , Tim April , Michael Bailey , Matthew Bernhard , Elie Bursztein Jaime Cochran , Zakir Durumeric , J. Alex Halderman , Luca Invernizzi Michalis Kallitsis ,

709 views • 35 slides
Understanding the Mirai Botnet Manos Antonakakis , Tim April , Michael Bailey ,

Understanding the Mirai Botnet Manos Antonakakis , Tim April , Michael Bailey ,

Understanding the Mirai Botnet Manos Antonakakis , Tim April , Michael Bailey , Matthew Bernhard , Elie Bursztein Jaime Cochran , Michalis Kallitsis , Damian Menscher , Zakir Durumeric Deepak Kumar , Chad

628 views • 34 slides
Mirai Botnet: How IoT Botnets Performed Massive DDoS Attacks and Negatively Impacted Hundreds of

Mirai Botnet: How IoT Botnets Performed Massive DDoS Attacks and Negatively Impacted Hundreds of

Mirai Botnet: How IoT Botnets Performed Massive DDoS Attacks and Negatively Impacted Hundreds of Thousands of Internet Businesses and Millions of Users in October 2016 William Favre Slater, III, M.S. MBA, PMP, CISSP, CISA Sr. Cybersecurity

1.36k views • 53 slides
IoDDoS The Internet of Distributed Denial of Service Attacks A Case Study of the Mirai

IoDDoS The Internet of Distributed Denial of Service Attacks A Case Study of the Mirai

SPAWAR S YSTEMS C ENTER P ACIFIC IoDDoS The Internet of Distributed Denial of Service Attacks A Case Study of the Mirai Malware and IoT-Based Botnets 24-26 April, 2017 Presented at the 2 nd International Conference Presented by Roger

654 views • 20 slides
FY2015 Third Quarter Financial Results MIRAI Toyota Motor Corporation February 4, 2015

FY2015 Third Quarter Financial Results MIRAI Toyota Motor Corporation February 4, 2015

FY2015 Third Quarter Financial Results MIRAI Toyota Motor Corporation February 4, 2015 Cautionary Statement with Respect to Forward-Looking Statements This presentation contains forward-looking statements that reflect Toyotas plans and

963 views • 24 slides
Look Into The Future - Analyzing Mirai botnet - Mauritius 2016 FIRST TC Minoru Kobayashi

Look Into The Future - Analyzing Mirai botnet - Mauritius 2016 FIRST TC Minoru Kobayashi

Look Into The Future - Analyzing Mirai botnet - Mauritius 2016 FIRST TC Minoru Kobayashi Internet Initiative Japan Inc. Who am I ? Minoru Kobayashi I work for Internet Initiative Japan Inc.. IIJ is a Japanese ISP (We are the

418 views • 19 slides
INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION

INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION

TRAINING COURSE ON SOCIAL PROTECTION & FORMALIZATION TRINIDAD AND TOBAGO MARCH 15, 2017 INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION Design of the NIS Assistance from the

547 views • 23 slides
Poisoning Attacks on Federated Le Learning-based In Intrusion Detection System Thien Duc

Poisoning Attacks on Federated Le Learning-based In Intrusion Detection System Thien Duc

Poisoning Attacks on Federated Le Learning-based In Intrusion Detection System Thien Duc Nguyen, Phillip Rieger, Markus Miettinen, Ahmad-Reza Sadeghi Typical IoT Devices 2 IoT The S stands for Security 3 Mirai: Largest Disruptive

508 views • 33 slides
Atomic level material processing and characterization for nanoscale CMOS transistors Toshihiko

Atomic level material processing and characterization for nanoscale CMOS transistors Toshihiko

JST - DFG Joint Workshop January 21, 2009 Atomic level material processing and characterization for nanoscale CMOS transistors Toshihiko Kanayama Nanodevice Innovation Research Center, AIST, Japan MIRAI project 1 New Materials and Structures

264 views • 24 slides
WAMOS 2018 Common Attack Vectors of IoT Devices 09.08.2018 Alexios Karagiozidis Motivation

WAMOS 2018 Common Attack Vectors of IoT Devices 09.08.2018 Alexios Karagiozidis Motivation

WAMOS 2018 Common Attack Vectors of IoT Devices 09.08.2018 Alexios Karagiozidis Motivation Botnetworks and Internet attacks increased rapidly Examples of security issues: Mirai-Bot-Network CVE-2018-10967, bufferoverflow via

848 views • 27 slides
Runtime Security Lab Michael Schwarz Friday 31 st August, 2018 Graz Security Week 2018

Runtime Security Lab Michael Schwarz Friday 31 st August, 2018 Graz Security Week 2018

Runtime Security Lab Michael Schwarz Friday 31 st August, 2018 Graz Security Week 2018 https://www.incapsula.com/blog/malware-analysis-mirai-ddos-botnet.html www.tugraz.at Large IoT Incidents September 21, 2016 > 600 Gbps on Brian Krebs

1.19k views • 71 slides
Linux IoT Botnet Wars and the Lack of Security Hardening Drew Moseley Solutions Architect

Linux IoT Botnet Wars and the Lack of Security Hardening Drew Moseley Solutions Architect

Linux IoT Botnet Wars and the Lack of Security Hardening Drew Moseley Solutions Architect Mender.io Session overview Case-studies of 3 botnets Mirai (August 2016) Hajime (October 2016) BrickerBot (March 2017) Common security

902 views • 28 slides
SIEM 101 Workshop Optimize IT with Security Information and Event Management Alex Dow Chief

SIEM 101 Workshop Optimize IT with Security Information and Event Management Alex Dow Chief

SIEM 101 Workshop Optimize IT with Security Information and Event Management Alex Dow Chief Research Officer Mirai Security Inc. Alex.Dow@miraisecurity.com GCIH|SCF|CISSP|OPST https://www.miraisecurity.com Agenda What is SIEM? Why

807 views • 25 slides
NREN SIEM Deployment Project Speakers: Alex Dow, Barb Carra, Jill Kowalchuk, Todd Williams and

NREN SIEM Deployment Project Speakers: Alex Dow, Barb Carra, Jill Kowalchuk, Todd Williams and

Conference 2018 Conference 2018 NREN SIEM Deployment Project Speakers: Alex Dow, Barb Carra, Jill Kowalchuk, Todd Williams and Ivor MacKay Speakers Alex Dow, Consultant Mirai Security Barb Carra, Chief Operating Officer Cybera Jill

292 views • 18 slides
INTRODUCTION Introduction 2/42 INTRODUCTION Alternations I am giving bread to the

INTRODUCTION Introduction 2/42 INTRODUCTION Alternations I am giving bread to the

Patterns of variation in the expression of case and agreement Andrs Brny Leiden University Centre for Linguistics 9 November 2019, BaSIS Workshop a.barany@hum.leidenuniv.nl INTRODUCTION Introduction 2/42 INTRODUCTION

1.37k views • 42 slides
Introduction Introduction Introduction Introduction Outline Motivation Failures

Introduction Introduction Introduction Introduction Outline Motivation Failures

Introduction Introduction Introduction Introduction Outline Motivation Failures Definition and concepts Process and product properties Principles SE Approaches Motivation Software and the economy The economies of

1.03k views • 49 slides
Introduction Introduction Introduction Nationwide Cause for Concern 1

Introduction Introduction Introduction Nationwide Cause for Concern 1

Introduction Introduction Introduction Nationwide Cause for Concern 1 https://www.cdc.gov/std/stats17/infographic.htm Introduction Epidemiology in Western Colorado CPHE Surveillance Data Report, May 2018 Chlamydia Epidemiology in Western

977 views • 39 slides
DAQ introduction Purpose of this talk : (1) Introduction for those who have not been in every

DAQ introduction Purpose of this talk : (1) Introduction for those who have not been in every

DAQ introduction Purpose of this talk : (1) Introduction for those who have not been in every meeting (2) Some ideas of diagrams for section 7.1 (Introduction) of TP. Giles Barr 25 Jan 2018, Pembroke College On DUNE, the reality is there is a

474 views • 10 slides
INTRODUCTION cf. Schneider, Chapter 1 INTRODUCTION THEY ARE OUT TO GET YOU INTRODUCTION WHAT

INTRODUCTION cf. Schneider, Chapter 1 INTRODUCTION THEY ARE OUT TO GET YOU INTRODUCTION WHAT

ADVANCED COMPUTER SECURITY INTRODUCTION cf. Schneider, Chapter 1 INTRODUCTION THEY ARE OUT TO GET YOU INTRODUCTION WHAT IS SECURITY? A systems security policies describe What the system is supposed to do Store and provide access

479 views • 16 slides
Overview Introduction to SMIL Introduction to W3C and XML Introduction to SMIL

Overview Introduction to SMIL Introduction to W3C and XML Introduction to SMIL

Overview Introduction to SMIL Introduction to W3C and XML Introduction to SMIL Writing a SMIL file Adding Media Objects Martin Halvey Clipping media files January 2008 Timing and Synchronising Layout World Wide

387 views • 14 slides
14 Introduction Introduction Bad guys can put malware into Example: hosts

14 Introduction Introduction Bad guys can put malware into Example: hosts

Introduction Introduction source Encapsulation ISO/OSI reference model message M application segment H t H t M transport network datagram H n H n H t M presentation: allow applications to frame link H l H n H t M interpret

583 views • 4 slides

More recommend