End-to-end solution protects against hardware cyber attacks

30th January 2019
Posted By : Lanna Cooper
End-to-end solution protects against hardware cyber attacks

 

Sepio Systems has introduced the next generation software solution that offers comprehensive mitigation of hardware-based cyber attacks. The advanced mitigation capabilities protect against manipulated peripherals, transparent network devices, and firmware vulnerabilities.

Sepio's solution has been deployed in over 20 mid to large banks, insurance, and telecom companies in the US, Singapore, Brazil, and Israel. The current install base secures over 600,000 workstations and network ports.

Rogue device cyber attacks are rapidly growing as demonstrated by recent reports of European banks losing tens of millions of dollars after hackers implanted hardware attack tools that compromised the secured infrastructure.

"These attacks are just the 'tip of the iceberg' as most remain undisclosed," said Yossi Appleboum, CEO of Sepio Systems. “In many cases, hitting an organisation is as simple as replacing a trusted peripheral with a manipulated one. For example, we discovered multiple Raspberry Pi computer modules, that include wireless connectivity, implanted in keyboards that were used for exfiltration attacks. The implant was emulating keyboard keystrokes to infect the workstation and steal data and was running undetected before Sepio’s RDM was deployed.”

In another incident, an off-the-shelf network router was used for infiltrating a Tier 1 bank. This tiny device was plugged in-line between a printer and the enterprise network, allowing covert remote access into the bank’s IT systems. Sepio’s software was able to trace this rogue device based on its physical fingerprint.

“Manipulated devices, intentionally used by insiders or socially engineered employees, are causing significant damages. We also witness an increasing number of penetrated uncontrolled supply chains that deliver infected equipment.” said Appleboum.

“While companies were focused on their software cyber risks, they overlooked the threat coming from their hardware. Users can not install unregulated software on a corporate computer but can easily connect an uncontrolled hardware accessory.”


You must be logged in to comment

Write a comment

No comments




Sign up to view our publications

Sign up

Sign up to view our downloads

Sign up

IoT Tech Expo 2019
25th April 2019
United Kingdom Olympia, London
European Microwave Week 2019
29th September 2019
France Porte De Versailles Paris
IoT Solutions World Congress 2019
29th October 2019
Spain Barcelona