Bandwidth for Sale
Attackers hijacked storage and video devices in 34 countries and quietly cashed in on owners' internet connections via a residential proxy network.
Key terms
AP Cybersecurity alignment
- 2.1.C.4After gaining access during an attack, adversaries establish persistence to maintain access without needing to regain it. They may use a command and control (C2) protocol to send commands to the device and receive output,…Learning objective: Describe the phases of a cyberattack.
- 4.1.C.1Adversaries can develop exploits for known vulnerabilities in software (including operating systems). Devices with unpatched software are vulnerable to these exploits, which could allow an adversary to crash a system, view…Learning objective: Explain how adversaries can exploit common device vulnerabilities to cause loss, damage, disruption, or destruction.
- 4.3.C.2Ensuring that a computer’s operating system and software applications are updated to the most recent version prevents adversaries from taking advantage of a known vulnerability.Learning objective: Explain why keeping a device’s operating system and software updated makes it more secure.
AP Networking alignment
- 1.1.A.3Diagnostic tools and techniques can be used to establish a theory of probable cause for the loss of functionality in devices and networks. This can save time while troubleshooting by narrowing the potential solutions. Many…Learning objective: Explain how to troubleshoot common device and network issues.
- 2.5.B.3Security controls to mitigate firmware vulnerabilities include regularly installing firmware updates to apply security patches and enabling automatic updates if available to ensure devices have the latest firmware version.Learning objective: Determine appropriate security controls to mitigate vulnerabilities in a SOHO network.
- 4.1.A.4When integrity is compromised, systems may contain false or inaccurate data. A breach of integrity can be identified by: • unauthorized data changes • inconsistencies in logs • unauthorized software installations • corruption…Learning objective: Identify evidence of compromised confidentiality, integrity, or availability.