INTERPOL Digital Security Challenge addresses Internet of Things security risks

INTERPOL recently held its latest Digital Security Challenge in Vienna, Austria, during which 43 cybercrime and digital forensics experts from 23 countries investigated a simulated cyberattack on a bank launched through an Internet of Things (IoT) device.

Through their analysis of the simulated attack, investigators found that the criminals had hacked a webcam and sent an email attachment containing malware to the bank’s computers. Once the identified the compromised webcam, they were able to access the digital data it held determining the command and control server controlling the device. Participants also identified a second command and control server and uncovered technical vulnerabilities in the servers that could be used to prevent further attacks.

“Cybercrime investigations are becoming more and more complex and operational exercises such as the Digital Security Challenge, which simulate some of the hurdles that investigators face every day, are vital for the development of our capacities,” Peter Goldgruber, Secretary General of the Austrian Ministry of the Interior, said.

INTERPOl and its National Central Bureau in Vienna organized the three-day training session in cooperation with NEC Corporation and Cyber Defense Institute. Specialists from NEC Corporation, InfoSec, Meiya Pico, SECOM, Kaspersky Lab and TrendMicro delivered training sessions during the event, the UN Office on Drugs and Crime (UNODC) also provided support.