GFI Software: Ransomware attack on Benešov hospital highlighted the risks of IoT devices

On average, every new IoT device is attacked within 5 minutes of being connected

PRAGUE, December 16, 2019 – GFI Software, a provider of security solutions for enterprise networks, stated that IoT devices connected to corporate networks will become one of the biggest threats in 2020. The recent ransomware infection at Benešov hospital, which took the computer network, including all equipment, out of operation and made it necessary to cancel scheduled surgeries, highlighted the risks posed by the ever-increasing number of IoT devices.

Organizations are using an increasing number of IoT devices to improve their productivity, such as sensors sending data to manufacturing MES systems, camera systems, door systems in hotels or office buildings, and medical devices. According to Gartner, 14 billion IoT devices are currently connected to the internet, and this number will exceed 25 billion by 2025.  According to another survey, every new IoT device is targeted by an attack on average within 5 minutes of being connected to a corporate network.

IoT devices are essentially computers or contain them, and as such are vulnerable just like any other systems containing an operating system and software applications. In enterprise networks, IoT devices are most threatened by DoS attacks that cause slowdowns or even unavailability of the corporate network, leading to financial losses and reputational damage. Ransomware, in turn, can alter or completely disable device functionality (for example, medical equipment) until the organization pays a ransom. Alternatively, such an IoT device may become part of a botnet carrying out cyberattacks.

Many IoT device manufacturers supply their products with default passwords, no encryption options, and irregular or no updates, allowing attackers to easily gain control of the device and potentially the entire network. There are several generally useful recommendations for the secure use of IoT:

• Choose the right device – It is recommended to avoid products that do not allow security settings to be configured, encrypted communication, and do not have manufacturer support for software updates;
• Isolate from production systems – IoT devices should run on a different firewall-protected network from production machines and systems in order to shield critical applications;
• Update regularly – Install software or firmware updates immediately as soon as they are available – if automated patch management is not available, perform updates at least manually. 
• Regular backups with active protection – So that, in the event of an attack, clean, functional backups can be used to restore critical systems as quickly as possible.

 “The case in Benešov showed that 2020 will not be a calm period for IT security managers either,” said Zdeněk Bínek, responsible for GFI Software sales in the Czech Republic and Slovakia. “The pressure to digitize organizations will grow, along with the deployment of new technologies based on IoT or Industry 4.0. We therefore expect growing demand, among other things, for solutions such as Kerio Control and GFI LanGuard, designed to preserve the integrity of corporate networks and eliminate software vulnerabilities.”