Having cheap, small, full-featured SoCs available is pretty awesome. Just Google for “cool Raspberry Pi projects”, and you’ll find no shortage of lists compiling the genuinely creative uses for diminutive devices. Of course, this kind of creativity isn’t always used for benign uses.
Kaspersky Labs posted about a hack of at least eight Eastern European banks using Raspberry Pis and other small computing devices. These were deployed in meeting rooms and other private locations in the banks with wired access.
From there the script isn’t all that original, but nonetheless devastating. The connected devices would look for any open shared folders, servers, or workstations. Basically anything that might be used for making payments. Then they would try to gain remote access, and inject all sorts of nastiness to obtain sensitive data.
All told, damages were estimated in the tens of millions of dollars.
Source: Kaspersky Labs
- Catching Up On Microsoft Build 2020 | Gestalt IT Rundown: May 20, 2020 - May 20, 2020
- Checksum: Episode 2 – Is IoT Security a Nightmare? - May 18, 2020
- AWS Rolls Out Graviton2 M6g instances - May 18, 2020
- The Three Philosophies of SolarWinds APM - May 15, 2020
- Rubbing Salt In the Exploit - May 15, 2020
- Dell EMC Unifies Midrange Storage with PowerStore | Gestalt IT Rundown: May 13, 2020 - May 13, 2020
- Riverbed Wasn’t Built In a Day - May 12, 2020
- Checksum: Episode 1 – Why Did Nvidia Buy Mellanox? - May 11, 2020
- How Do You Start Learning About Containers? - May 11, 2020
- Why Did Nvidia Buy Cumulus Networks? | Gestalt IT Rundown: May 6, 2020 - May 6, 2020