Latest in Gear

Image credit:

Dark web shop was selling access to a major airport's security systems

It only cost $10.
Share
Tweet
Share

Sponsored Links

Getty Images/iStockphoto

While McAfee's Advanced Threat Research team was looking into dark web marketplaces, it found a number of shops offering stolen access to various companies' and groups' systems. Disturbingly, among the findings was access to a major international airport's systems, which could be bought for the low price of just $10. McAfee said the shop appeared to be offering access to the airport's security systems as well as its building automation, surveillance and transit systems.

The shop was selling access to the airport's remote desktop protocol (RDP), which gives employees remote access to certain computers on the airport's network. "This access could allow cybercriminals to do essentially anything they want -- create false alerts to the internal security team, send spam, steal data and credentials, mine for cryptocurrency or even conduct a ransomware attack on the organization," McAfee said. The recent SamSam ransomware attacks often used RDP vulnerabilities to gain access to networks.

McAfee said that it also came across access to "multiple government systems," some of which were linked to the US, as well as "dozens of connections linked to health care institutions." For security reasons, McAfee didn't name the airport or any other entities that it found access to in its search, but it notified them of the breaches. The company also warned that this is a major problem across industries and it's one that needs to be more effectively addressed. "Governments and organizations spend billions of dollars every year to secure the computer systems we trust," said McAfee. "But even a state-of-the-art solution cannot provide security when the backdoor is left open or carries only a simple padlock."

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
Tweet
Share

Popular on Engadget

Someone bought the new Chromecast and told Reddit all about it

Someone bought the new Chromecast and told Reddit all about it

View
The best wireless workout headphones

The best wireless workout headphones

View
Here's everything Amazon announced at its big hardware event

Here's everything Amazon announced at its big hardware event

View
Google Chrome will warn you if your logins have been stolen

Google Chrome will warn you if your logins have been stolen

View
Apple iPad (2020) and iPadOS 14 review

Apple iPad (2020) and iPadOS 14 review

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr