Foreign vending machines encounter hackers, IoT security needs to be vigilant

Nowadays, the era of the Internet of Everything has come, making many industries show a trend of self-service and unmanned. In subway stations, schools, office buildings, roadsides and communities, 'square' vending machines are nothing new anymore-when you are too thirsty, you may complain that they are too expensive ! According to Gartner data, it is estimated that by 2020, 26 billion devices will be connected to the Internet. While many devices will bring convenience to people’s lives, perhaps certain things will make people rely more and more on intelligence. The 'lazy people' of the equipment have become 'horrified'! In February of this year, the foreign media Networkwold reported a 2017 data breach report from Verizon showing that hackers used malware and botnets to control a university's vending machines and other Internet of Things devices. Hackers use brute force cracking and weak passwords to attack. Botnets are spreading among IoT devices. Hackers can easily produce thousands of systems attacked 'broilers'. Faced with the dazzling array of products in vending machines, have you ever thought about the opportunity to get 'free drinks' without spending money? At this time, you must regret not having a hacker friend. At the first XPwn hacker cracking show in 2016, Baidu Security hackers 'Xiao Huihui' directly used the vending machine to use the payment system incorrectly. After scanning the code, you can get the drink directly. Recently, Avanti Markets, a supplier of self-service vending machines in the United States, discovered that a piece of malware attacked some Avanti Markets vending machine terminals. The attackers used malicious software to attack the company's online payment system, including information such as credit card name, number, and expiration time, facing security risks. Avanti Markets also stated that “not all self-service vending machines have been attacked, and personal information on some machines may be leaked.” As an important part of vending machines, the payment system can use credit cards, scan codes, fingerprints and Various forms of payment, such as cash, indirectly collect the user's private information. If the system is attacked, it will directly or indirectly expose the user's private information. In the foreseeable future, hundreds of millions of IoT devices will cover the entire planet, and security has become the most acute problem in the IoT industry, both in terms of software and hardware. Generally, IoT device manufacturers do not have a strong security background. It is hoped that in the future, device manufacturers can conduct more in-depth cooperation with information security vendors and other parties to jointly solve the security problems of IoT devices. The above information is provided by vending machine manufacturers. Please mark the reprint. Previous post: Box lunch vending machine aims at market demand and develops with O2O in an all-round way