A Year After Mirai: Insecure Devices are still a Huge Problem

A year after the Mirai botnet's initial large-scale DDoS attacks, security researchers (notably SANS ISC) estimate that upwards of 100,000 devices worldwide may still be running Mirai or variants. Scanning and break-in attempts — largely exploiting default manufacturer credentials and Telnet — remain pervasive against cameras, DVRs, routers and other IoT devices; many devices are difficult to patch or update, so infections and the risk of future botnet-driven DDoS campaigns are likely to persist.