News for hackers. Stuff that matters.

A comment on Ask HN: How did Dyn fail to fend off DDOS?. Parent comment

Re:Ask HN: How did Dyn fail to fend off DDOS? by mathrawka on Saturday October 22, 2016 @01:39PM (#12769647)
Change the default admin password.

The original Mirai program tried a little over 60 passwords and it would just brute force into an IoT device.[1]

From what I read, it seems that one specific manufacturer in China is the owner of a lot of devices used in the Mirai botnet attacks.[2]

1: https://github.com/jgamblin/Mirai-Source-Code/blob/master/mi... 2: (I cannot find the link, but it was an article from yesterday)

EDIT:

Found this when googling the strange '7ujMko0admin' password in Mirai: http://www.cam-it.org/index.php?topic=9396.0 So it looks like the Chinese manufacturer that they target is Dahua.

[ Parent | on HN ]
Re:Ask HN: How did Dyn fail to fend off DDOS? by wgyn on Saturday October 22, 2016 @02:00PM (#12769758)
Brian Krebs pegged a company called XiongMai: https://krebsonsecurity.com/2016/10/hacked-cameras-dvrs-powe...
[ Parent | on HN ]
Re:Ask HN: How did Dyn fail to fend off DDOS? by nerdy on Saturday October 22, 2016 @02:45PM (#12769986)
That article also mentions the credentials are in the firmware.
[ Parent | on HN ]