There’s a new trick to send spam: using legitimate business email services. Just a few days ago, I received an email from Honeywell. It was spam. I checked the sender address and the sending domain. It seemed to be sent from Honeywell indeed. So I wondered why Honeywell would spam me with something that’s completely […]
Continue Reading... No Comments.To mitigate the risks of IoT devices on your home network, Steve Gibson, the creator of ShieldsUP!, proposed a “Three Dumb Router” configuration to isolate the insecure IoT devices from your normal LAN, where the more valuable and more secure devices such as PCs and NAS storage reside. Since the devices stay in their own […]
Continue Reading... No Comments.Ars Technica reported today that the VPNFilter malware targets a much larger number of devices than previously thought (200,000 additional routers were added to the initial estimate of 500,000). And it is more powerful than revealed in original analysis. VPNFilter’s elaborate design involves three stages. Stage 1 acts as a backdoor that uses a sophisticated […]
Continue Reading... No Comments.On May 24, 2018, Portland, Oregon local TV station Kiro 7 reported that an Amazon Alexa device recorded a private conversation, then sent it out to a random contact. Amazon confirmed the incident, and attributed it to an “unlikely” string of events that caused Alexa to mistakingly interpret background sounds as commands. In other words, […]
Continue Reading... No Comments.IoT devices are known to be vulnerable to cyber attacks. The best known instance of such an attack is probably the Mirai botnet. The botnet infected numerous IoT devices (such as home routers and IP security cameras) and used them to perform a Distributed Denial of Service (DDoS) attack. It brought down major web sites […]
Continue Reading... No Comments.Are you worried that someone is connecting to your WiFi router without your permission? Well, if you are securing your WiFi with WPA2-AES (CCMP) encryption and a fairly strong password, you should be confident that no one is able to connect to your WiFi without knowing your password. Not even with the most recent KRACK […]
Continue Reading... No Comments.In a previous post, I talked about how to secure your router WiFi. That’s only half of the puzzle. Another type of attack on your router comes directly from the Internet, without the need to connect to your WiFi signal. Due to the various security flaws on the home WiFi router, and the fact that […]
Continue Reading... No Comments.