1、 THE 2022-2023 IOT BOTNET REPORTVULNERABILITIES TARGETEDIntroduction2This report investigates the IoT botnet activity weve observed in consumer networks protected by CUJO AI from early July 2022 to the end of January 2023.For more insights into our research,visit the CUJO AI blog and the ISP securit

2、y hub.Most Internet of Things(IoT)devices have limited resources,Unix-like operating systems and inadequate cybersecurity measures.The latter,combined with the often short and neglected software support cycles from device manufacturers,provide a significant breeding ground for cybercriminals,who are

3、 keen to take advantage of the situation.The 2022-2023 IoT Botnet Report Vulnerabilities TargetedCopyright 2023 CUJO LLC Table of Contents 3The 2022-2023 IoT Botnet Report Vulnerabilities TargetedCopyright 2023 CUJO LLCIntroduction loT Threats What Are We Calling a Botnet?How Botnets Work Previous B

4、otnet ReportThe 2022-2023 loT Botnet Report:SummaryList of Exploited VulnerabilitiesVulnerability Type Distribution by CWEIts All About Command InjectionSpecific Vulnerabilities TargetedTop 10 Vulnerabilities Exploited in 2021 vs 2022/2023New Exploited VulnerabilitiesVulnerability Distribution by Di

5、sclosure Year:New vs Old ExploitsSets of ExploitsHow CUJO AI Protects Internet Users Against Botnets24555671414192023252729 Table of Contents The 2022-2023 IoT Botnet Report Vulnerabilities TargetedIoT Threats 4Our latest annual cybersecurity report shows that while IP cameras make up only 1.2%of al

6、l devices monitored and protected by CUJO AI,they are targeted by 24%of all malicious activities.The following popular manufacturers devices are targeted by the most threats on average:Seagate(NAS products)Speco Technologies(CCTV,DVR products)QNAP(NAS products)Hikvision(IP Camera,DVR products)The 20