Over the weekend, a hacker released a powerful computer source code onto the Internet that targets connected devices. According to cybersecurity expert Brian Krebs, the code — called Mirai — is the same one that took down the high profile KrebsonSecurity website last month.

“The source code that powers the ‘Internet of Things’ (IoT) botnet responsible for launching the historically large distributed denial-of-service (DDoS) attack against KrebsOnSecurity last month has been publicly released, virtually guaranteeing that the Internet will soon be flooded with attacks from many new botnets powered by insecure routers, IP cameras, digital video recorders and other easily hackable devices,” Krebs stated.

That’s right — this code can literally create an army of hacked devices. This type of network is called a “botnet,” and it’s typically used to launch DDoS attacks, or concentrated cyber attacks against specific targets by large numbers of compromised systems. DDoS attacks are commonly used to take down websites. 

According to Ars Technica, Mirai is one of two competing botnet “families.” Some experts have reported seeing recent DDoS attacks peak at more than 1 terabit per second which is an astounding rate. And now, the code is available to the general public – meaning amateur hackers and sophisticated experts will have access to it.

The hope is that eventually, a patch will be created that will protect connected endpoints from Mirai. The problem is that it will be very difficult to appply this patch to devices which are currently in operation. In all likelihood, it will only be available on new devices once it becomes available. 

So, what can you do to protect your business? The truth is that it’s very difficult to protect against botnet infections. Some of your devices may already be hacked, and they could be attacking other systems without your knowledge.

The most important thing you can do is make sure all of your endpoints are updated with the most recent anti-malware software. You also need to monitor your network, and be on the lookout for advanced threat campaigns that could be targeting your business.

A managed service provider (MSP) can take care of the hard work for you. By working with an MSP, you can go about your business knowing that a dedicated team of cybersecurity experts are monitoring your network with the latest technologies and applying important updates as soon as they become available.

A new breed of hacktrepeneurs has awoken and they have little to fear and everything to gain by infecting as many companies as possible and extorting money from them. Apex Technology Services stands ready to protect your company regardless of whether it’s located in New York City; White Plains, New York; Connecticut; Australia; Europe; or anywhere else. Our full suite of cybersecurity and IT support services is at your disposal, enabling you to spend less time worrying about and more time growing your business.

In addition, our new Cybersecurity Compliance Certification for law firms will help keep your legal practice from becoming the next Panama Papers victim. This baseline cybersecurity audit for the legal industry should be considered seriously by all law firms.