In the last week of November, Deutsche Telekom AG (ADR)(OTCMKTS:DTEGY) had to deal with a cyber-security attack that infected almost 1 million routers utilized to access company’s internet service. Later it was stated that this cyber-attack was part of a movement aiming web-connected devices across the globe. This revelation from the German government and security researchers stoked fears of a jump in cyberattacks that disturb internet service by misusing common susceptibilities in widely used webcams, digital video recorders, routers and other web-connected equipment.
Security researchers stated that the infections spread to nations including Britain, Ireland and Brazil utilizing a procedure similar to one that halted millions of people in Europe and the U.S. from reaching sites including Twitter, Spotify and PayPal Holdings Inc on October 21. Dirk Backofen, a senior Security Executive at Deutsche Telekom, said that it was an international attack against all types of devices.
The BSI reported that German government networks were targeted in that attack on Deutsche Telekom consumers, though authorities confirmed they succeeded in maintaining systems online. Deutsche Telekom stated internet outages hit almost 900,000 of its customers, or about 4.5% of its fixed-line clients.
The company and the German government failed to identify other victims, although cyber security entity Rapid7 Inc stated it observed the attackers attempting to infect routers across the world. Vodafone Group Plc and Irish telecom operator Eir use routers that were susceptible to same kind of outbreak.
Flashpoint, a second cyber security research firm in the United States, reported it routers were infected in Britain, Germany and Brazil. Eir said that it was aware of prospective susceptibilities in broadband modems from ZyXel Communications Corp utilized by about 30% of Eir clients. They have deployed numerous solutions both at the network and device level which will eliminate the risk.
The National Computer Emergency Response Team of Brazil stated that it was assessing the impact of the attack on nation, but declined to confirm on the number of computers that had been infected.