Sagishi: an undercover software agent for infiltrating IoT botnets

Internet of Things (IoT) devices are continuously proliferating. In fact, by 2030, up to 125 billion devices will be connected to the Internet.1 Directly related to the proliferation of IoT devices is the proliferation of IoT malware and, in particular, IoT botnets. Mapping and classifying bots forming part of IoT botnets and how these propagate over the Internet is a challenging task. Fooresec aimed to address this issue by footprinting, reporting and remotely securing IoT devices that had been previously turned into bots.2 Its activities were based on honeypots that were able to 'sense' the Internet solely in order to map and classify IoT bots according to their behaviours.