Ich stimme der Verwendung von Cookies zu. Auch wenn ich diese Website weiter nutze, gilt dies als Zustimmung.

Bitte lesen und akzeptieren Sie die Datenschutzinformation und Cookie-Informationen, damit Sie unser Angebot weiter nutzen können. Natürlich können Sie diese Einwilligung jederzeit widerrufen.





SAM responds to ZuoRAT, the game changing attack that emphasizes the need for router protection

05.07.2022, 5964 Zeichen
Tel Aviv, Israel (ots/PRNewswire) - ZuoRAT is a sophisticated multi-tier, router fleet attack targeting home-office routers on an unprecedented scale, and is the most significant widespread attack since Mirai in 2016. Help is on the way with protection for routers and all devices connected to them by SAM
Following the announcement issued by Lumen Technologies' Black Lotus Labs on 6/29/2022, SAM Seamless Network, the global leader of security and intelligence services for unmanaged networks and IoTs, today reveals the extent of the attack and how to protect against it.
Yesterday Lumen research labs published a report outlining a widespread cyber-attack for home and SOHO networks. These attacks were generated by a well-organized group, possibly a state-sponsored organization, which investigated and exploited several vulnerabilities found in routers. It affects the hardware of well-known vendors such as Asus, Cisco, DrayTek and NETGEAR. The list is not exhaustive and other routers may still be compromised. The evidence gathered so far indicated that this group has been planning this attack scenario for months.
ZuoRAT is a multi-tier attack infiltrating home and home-office consumer-grade routers. Once in the network , it exploits vulnerabilities on all connected computers and devices, making it possible for the attackers to commit a very sophisticated attack using two of the most dangerous methods: Man-in-the-Middle (MITM) and Trojan Horse.
With MITM attacks, routers and IoTs in unmanaged networks could be leveraged by perpetrators to position themselves in a conversation between a user and an application. This can allow access to a user's credentials, bank accounts, social media accounts, an employer's VPN, browsing history, personal preferences and essentially any online activity that is transmitted via the router.
Essentially, once attackers have gained access to the router they have visibility to everything on the network. The second stage will then be to infiltrate an organization using the injection of a RAT (Remote Access Trojan) onto a PC, providing the attackers complete freedom to act as they wish and gather all information on the network, including traffic and all existing vulnerabilities – this is all typically the first step in a widespread attack.
Everyone using the compromised home network is at risk. This attack is aimed at consumers and SOHO businesses, but there could also be implications for well-established enterprises as employees working from home (WFH) undermine the security posture of the organization by connecting to corporate networks from infected home environments.
Once the attackers enter the router, they constantly scan the network and connected devices, including corporate laptops, waiting for a time when employees try to access the office network from home to learn which updates are currently installed on the employer's network and then exploit unpatched vulnerabilities, compromising the entire corporate network.
Internet service providers (ISPs) often adopt DNS solutions at the core network, and although these types of solutions might provide some level of protection against phishing attacks, they leave users exposed to many other types of attacks that require much more dynamic protection at the LAN level. This "local" protection is necessary in order to match the capabilities of sophisticated adversaries and prevent them from spreading malware and related in the network.
The SAM agent is installed directly on the router gateway and then provides deep visibility into the network, which enables the ISP and customer to monitor and track any suspicious activity across all connected devices. The agent uses a unique deception mechanism for router protection that allows it to trick perpetrators. In addition, one of SAM's unique capabilities is its ability to respond quickly to new vulnerabilities and patch those within hours of discovery. This capability prevents attacks from spreading to more networks.
In the case of ZuoRAT, the good news is that users who have SAM agent installed on their routers are protected. SAM has several mechanisms that block some of the initial activities that were performed by these actors. The even better news is that SAM is platform-agnostic, which means it can be integrated with any router, new or old, to deliver a unified protection layer for the ISP's entire router fleet.
"We have not seen something of this magnitude since Mirai. In the past few months we've seen a huge increase in the number of attacks targeting routers, this is exactly the reason ISPs should recognize the importance of protecting the routers as part of their critical infrastructure. For this reason, we see regulators around the world taking a more active role in protecting networks operating in their countries," said Sivan Rauscher, CEO of SAM Seamless Networks. "The only way to stop such sophisticated attacks is to have deep network visibility at the CPE-level, without it no one can predict what is going to happen next."
About SAM
The leading provider of cloud-native security and intelligence services for unmanaged networks and connected devices, protecting upwards of 470 million devices globally. With its intuitive AI technology, SAM addresses the challenges of our hyperconnected world, in which an explosion of IoT devices exposes potential attack surfaces for companies and consumers alike. SAM's device-agnostic software provides deep network visibility to protect against sophisticated cyber-attacks in real-time and prevent the spread of zero-day attacks. By using its unique cloud-based device and threat intelligence, SAM studies and identifies the behavior of every device to create customized protection for all home and SMB users, forming a bulletproof network.
www.securingsam.com
Photo - https://mma.prnewswire.com/media/1853330/SAM_Seamless_Net...
Press Contacts
Shiri Butnaru
Head of Marketing
shiri@securingsam.com
Mike Newsom
PR Consultant
mike@louvanpr.com
Digital press kit: http://www.ots.at/pressemappe/PR132809/aom

BSN Podcasts
Christian Drastil: Wiener Börse Plausch

Wiener Börse Plausch S2/93: Wohl keine Fusion Immofinanz / S Immo, beide bleiben im ATX; CA Immo Spoiler


 

Aktien auf dem Radar:DO&CO, Mayr-Melnhof, Wienerberger, Flughafen Wien, Immofinanz, FACC, UBM, Semperit, Frequentis, Athos Immobilien, Rosenbauer, Verbund, Warimpex, Oberbank AG Stamm, Andritz, Pierer Mobility, S Immo, Strabag, Airbus Group, Siemens, Volkswagen Vz., Puma, Symrise, HelloFresh, Brenntag, Hannover Rück, Münchener Rück, Fresenius Medical Care, Porsche Automobil Holding, Ahlers, Tesla.


Random Partner

S&T AG
Der Technologiekonzern S&T AG ist mit rund 6.300 Mitarbeitern und Niederlassungen in mehr als 30 Ländern weltweit präsent. Das im TecDAX® und SDAX® an der Deutschen Börse gelistete Unternehmen ist einer der führenden Anbieter von IoT (Internet of Things) Technologien. In diesen Bereichen konzentriert sich S&T auf die Entwicklung sicherer und vernetzter Lösungen durch ein kombiniertes Portfolio aus Hardware, Middleware und Services. Eigentechnologien in den Bereichen Smart Factory, Zugfunksysteme, Medizintechnik, Kommunikationslösungen und Smart Energy sowie ein breites Portfolio an IT-Dienstleistungen machen S&T zu einem gefragten Partner für Kunden unterschiedlichster Branchen.

>> Besuchen Sie 62 weitere Partner auf boerse-social.com/partner


Mehr aktuelle OTS-Meldungen HIER


Meistgelesen
>> mehr


PIR-Zeichnungsprodukte
AT0000A2SST0
AT0000A2WV18
AT0000A2SUY6

Börse Social Club Board
>> mehr
    Star der Stunde: Rosenbauer 1.12%, Rutsch der Stunde: EVN -0.65%
    wikifolio-Trades Austro-Aktien 13-14: OMV(1)
    PARTLINK zu Petro Welt Technologies
    Star der Stunde: Rosenbauer 0.7%, Rutsch der Stunde: SBO -0.58%
    wikifolio-Trades Austro-Aktien 12-13: OMV(1), Erste Group(1)
    Star der Stunde: Rosenbauer 1.28%, Rutsch der Stunde: Marinomed Biotech -1.26%
    wikifolio-Trades Austro-Aktien 11-12: Uniqa(1), Kontron(1), AT&S(1)
    Star der Stunde: DO&CO 1%, Rutsch der Stunde: Marinomed Biotech -2.01%
    wikifolio-Trades Austro-Aktien 10-11: Kontron(2)