Case Study: Israel Industrial Control System Provider stops IoT malware spread with UnderDefense's IoT Security Assessment and Malware Reverse Engineering

Israel Industrial Control System Provider identifies 95 C&C servers in 3 days with UnderDefense

The customer, an Israel-based industrial control system provider, faced a challenge when two of its IoT devices exhibited unusual activity indicative of a malware infection. They engaged the vendor, UnderDefense, to perform an IoT security assessment and malware reverse engineering to determine how, when, and why the devices were compromised and to stop further distribution.

UnderDefense conducted a forensic analysis, reverse engineering a complex Linux malware packed with UPX. They identified the malware as Linux Shishiga/LuaBot, which used SSH brute-forcing to spread and communicated with 95 C&C servers. The solution provided critical insights into the malware's behavior and persistence mechanisms, enabling the client to contain the threat. The results prevented potential full application compromise, unauthorized financial transactions, and a loss of client trust.