Forescout proof-of-concept ransomware attack affects IoT, OT


A new proof-of-concept ransomware attack from Forescout Technologies raises troubling implications for IoT and operational technology security.

Forescout Technologies’ Vedere Labs released research Wednesday presenting the proof-of-concept attack where a hypothetical attacker uses a vulnerable IP camera to compromise an organization’s IT infrastructure and uses the access to shut down operational technology (OT) hardware. The attack uses pre-existing vulnerabilities and does not include new exploits.

However, Daniel dos Santos, head of security research at Vedere Labs, wrote that it was “the first and only work to date to combine the worlds of IT, OT and IoT ransomware” within a single, comprehensive proof of concept.

Read more…