Proof-of-concept ransomware for smart thermostats demoed at Defcon

Nearly all of the functionality is provided by a large, monolithic binary running as ‘root’. That’s not good.

Rule #1 of cheap and awful linux-in-a-plastic-box devices. Quoted for truth.

3 Likes