ARTICLE

"Reaper" Cyberattack Could Take Down The Entire Internet

News Image By Mac Slavo/SHFTplan.com October 25, 2017
Share this article:

Last year, the botnet Mirai caused a massive distributed denial-of-service (DDoS) attack in October, knocking popular websites off the internet for millions of users. Right now, the next cyber hurricane is on the way, and it could take down the entire internet.

According to ZD Net, the botnet, dubbed "Reaper" by researchers at Netlab 360, is appearing on the radar of security researchers.  A little over a month ago, the researchers detected the sizable botnet of infected Internet of Things (IoT) devices. 

Now, just weeks later, it's on track to become one of the largest botnets recorded in recent years.

The botnet is said to have ensnared almost two million Internet-connected webcams, security cameras, and digital video recorders (DVRs) in the past month, says Check Point, which also published research, putting its growth at a far faster pace than Mirai.


Mirai was "beautifully simple," said Ken Munro, a consultant at UK-based security firm Pen Test Partners. The malware would scan the internet and infect connected devices with default usernames and passwords, which either weren't or couldn't be changed by the owner. 

The collective bandwidth from the huge number of "zombie devices" that were infected and enslaved was directed at Dyn, an internet infrastructure company, which overloaded the company's systems and prevented millions from accessing popular websites.

Reaper, on the other hand, is much more complex. It's "what Mirai could easily have been," said Munro. It takes a slightly different, more advanced approach by quietly targeting and exploiting known vulnerabilities in devices and injecting its malicious code. 

This effectively hijacks the device for whenever the botnet controller is ready to issue their commands. Each time a device is infected, the device spreads the malware to other vulnerable devices just like a worm.

Mirai was much more aggressive too. It ran each device against a list of known usernames and passwords, but Reaper, by comparison,  is "not very aggressive," said Netlab. By targeting a known vulnerability, the botnet can swiftly take control of a device without raising any alarms.


 "One of the reasons Mirai didn't achieve its full potential is that the compromise didn't persist beyond a reboot," said Munro. "Hence, multiple botnet herders were competing for control of the compromised DVRs that comprised it, so the huge botnet it could have been was never built," he added.

Not only has the botnet gained substantially in size in the past month, it's capability is also expanding. New exploits have been added to the botnet's arsenal regularly in recent days, said Netlab. Check Point said 33 devices are vulnerable to attack so far. 

Researchers have also noted that several known, easy-to-exploit vulnerabilities have not been added to the botnet, raising questions about why some exploits have been added and not others.

But what's thrown researchers for a loop is that nobody can figure out what the botnet is for.

While the Mirai botnet was a point-and-shoot botnet that could be used to hose systems with vast amounts of bandwidth, Reaper can be used to run complex attack scripts on infected devices. 

Reaper's command and control infrastructure is also growing in size, accommodating more infected devices by the day. Netlab said 10,000 bots were under the wing of just one command and control server.

So far, there haven't been any signs of DDoS attacks yet. The botnet creator ("it appears that one group or individual has control of most of it," said Munro), is focusing on building the botnet's size. As it stands, Reaper's size today could be capable of "creating significantly more DDoS traffic than Mirai," said Munro. -ZD Net

A breakdown of the Reaper botnet shows that the malware that infects devices allows the botnet owner to remotely execute code on each device, said Alan Woodward, a professor at the University of Surrey. 

But because each device has such little individual computational power, the code running on each device would have to be harnessed collectively for a larger, coordinated computing task, he said. That could be anything from a DDoS on an internet target, to a much larger kind of attack.

"The aggregation of large numbers of the same Internet of Things (IoT) device leads to systemic issues," said Munro. "When it's one device affecting one home, it's irritating for the consumer, but when it's a million devices, deeper problems arise. 

For example, any IoT device that switches a lot of electrical power gives rise to potential to affect the electricity grid. Whether it's a smart kettle, a smart thermostat switching your air conditioning or solar panels -- all switch power," he said. 

"Trigger a million devices that switch 3kW concurrently and the power grid fails."

Researchers keep expecting the botnet to pounce, but it hasn't yet. What happens next is anybody's guess.

Originally published at SHFTplan.com - reposted with permission.




Other News

July 09, 2025From Japan To The U.S - Earthquake Fault Lines Are Awakening

Is there a possibility that a cataclysmic eruption of Mt. Rainier could occur in the not too distant future? On Tuesday morning, Mt. Rain...

July 09, 2025When The Left Wants Blood: The Quiet Slide Toward Political Violence

Democratic lawmakers are hearing increasingly violent rhetoric from their constituents-calls to "break the rules," "fight dirty," and stop...

July 09, 2025The Digital Trap: Europe's Quiet March Toward Total Control

Imagine a world where every transaction you make, every website you visit, every thought you dare to express online is silently recorded, ...

July 09, 2025Shepherds Without Scripture: What Do Today’s Pastors Really Believe?

One in four Mainline clergy doubt the existence of God. These aren't fringe bloggers or deconstructing TikTok influencers. These are the m...

July 07, 2025Hijacking Creation: Scientists May Only Be Years Away From Lab-Made Children

In-vitro gametogenesis - the creation of human sperm and eggs from skin or blood cells--is now just years away. Scientists across Japan, C...

July 07, 2025Death To The IDF? The Disturbing New Normal On The Progressive Left

Once reliably pro-Israel, the Democratic Party has undergone a dramatic reversal on the Israeli-Palestinian conflict-and no demographic re...

July 07, 2025Access Denied: How Age Rules Could Reshape The Internet For Everyone

If identity becomes the new key to the internet, then the next great digital debate won't be about content moderation-it will be about acc...

Get Breaking News