Cybersecurity Insight

DDoS Attack Gains Control Over CCTV Cameras and DVRs

29 Jun

A DDoS attack can wreck immediate havoc on your business’s network if it is ill-prepared to fight back. Unfortunately, DDoS, or distributed denial of service, attacks are being used against websites via CCTV DVRs and cameras, according to a recent report. The research firm Sucuri saw the barrage of requests firsthand, as one of the websites being attacked happened to be a small jewelry business whose website they managed.

Here’s how it happened – the attackers, as mentioned previously, took over close to 25,000 separate CCTV DVRs and cameras. Through these entry point, a DDoS attack was launched with close to 50,000 HTTP requests sent to the jewelry website per second. The reason that Sucuri researchers were able to confirm that these attacks were coming through CCTV cameras and DVRs is based on the messaging associated; specifically the HTTP requests would read “DVR Components Download”. This particular DDoS attack hit on a number of vulnerable points directly and indirectly related to the jewelry website at the center of it all, proving that you can never be too cautious when it comes to protecting your cyberspace.

There are a number of ways that this type of an attack could have been avoided, and while the blame is evenly spread amongst the parties involved, that doesn’t mean one entity can’t beef up their security even more in order to offset the potential lacking in other arenas. Let’s start with CCTV – these DVRs and cameras are notoriously ill-kept and updated by their operating systems. Something as simple as using a router if it is connected to the Internet will make a world of difference. Secondly, working with a MSS/MSSP is a great way to learn about your options as a business connected to the IoT.

Cyber security companies, like Neovera, are always updating their client’s systems with the next wave of protective devices in order to sidestep a potential disaster. One introductory conversation could mean the difference between keeping your precious data safe, and leaving it out in the open. By utilizing Neovera with its 24x7x365 monitoring and management services, clients can rest easy knowing they can focus on their day-to-day business dealings and leave the rest to trained cyber security specialists.