logo

Botnet Of Embedded Devices Used To Map Internet

ID: a5645974-185f-535b-b75b-8caeab494b89

STIX ID: report--a5645974-185f-535b-b75b-8caeab494b89

Feed Name: Security Ledger

Threat Score
70/100

Date Published: 2013-03-19

Date Updated: 2026-05-08

Author: Paul Roberts

...
...

### Executive Summary The report covers the "Internet Census 2012" (Carna) botnet in which an unknown researcher/hacker compromised around 420,000 internet-connected devices (consumer routers, set-top boxes, and some infrastructure equipment) to perform distributed scanning of the entire IPv4 space between March and December 2012, collecting ~9 TB of data using a custom binary, nmap, ICMP pings and reverse DNS; while presented as research, the activity involved illegal remote control and rebooting of hosts and highlights widespread insecure embedded devices.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.