Hello, welcome to the Monday, October 23rd, 2017 edition of the Sansonet Storm Center's Stormcast. My name is Johannes Ulrich, and I'm recording from Berlin, Germany.

It's just about a year after we learned about the Mirai Botnet. Well, it turns out that we do have now sort of an evolution of this that moved

beyond simple passwords. This one has been named so far IoT Reaper and it does, unlike

Mirai, not rely on standard passwords, but use vulnerabilities predominantly in web applications in affected devices.

At this point, it looks like it's going after a good number of routers like Netgear D-Link links, also a couple of disk storage devices like sonology and a number of cameras netlap the company

that first reported about this did count nine distinct vulnerabilities that are being exploited

here they're seeing about 10,000 infected systems checking into command control

server. Now, this is still a very small number compared to even what's left over of

Mirai. But regardless, this is likely going to be the next wave of iot botnets that no longer use these very much

overused at this point default passwords and try to find vulnerabilities that just haven't been

patched yet and if past experiences any guidance here well patches are often not applied to these devices,

so even older vulnerabilities will likely be quite useful.

Checkpoint also reported about this botnet.

They're actually estimating more than a million infected systems.

Netlaps estimate maybe a little bit conservative in that it is really only

based on some command control servers. On the other hand, it would be very plausible that there

are multiple subbot nets that exist here that aren't necessarily all tracked by the same

command control infrastructure.

And we do have another siding of the Mac proton malware.

This time it came attached to a legitimate download of the El Media Player or Fulks.

So if you downloaded this software on October 19th from the official website or from

any other website for that matter, you probably need to double check to make sure that you

...