{"id":72119,"date":"2023-09-27T04:00:28","date_gmt":"2023-09-27T11:00:28","guid":{"rendered":"https:\/\/forescoutstage.wpengine.com\/?p=72119"},"modified":"2025-04-16T09:59:15","modified_gmt":"2025-04-16T13:59:15","slug":"r4iot-when-ransomware-meets-the-internet-of-things","status":"publish","type":"post","link":"https:\/\/www.forescout.com\/blog\/r4iot-when-ransomware-meets-the-internet-of-things\/","title":{"rendered":"R4IoT: When Ransomware Meets the Internet of Things"},"content":{"rendered":"

Originally published June 1, 2022<\/em><\/p>\n

In mid-2022, Forescout Research – Vedere Labs developed R4IoT, a proof-of-concept that showed how IoT devices could become entry points for IT and further OT ransomware attacks. The original blog post, below, explains how we came to create R4IoT and why. Our 2023H1 Threat Review<\/a> included ample evidence that cross-device attacks like R4IoT are now a reality. Some threat actors are routinely mixing traditional endpoints with unmanaged devices such as VPN appliances, routers, network attached storage (NAS) and building automation devices as part of their attack campaigns. Clearly, it’s not enough to detect emerging threats; you must also be able to respond to them.<\/p>\n

Since unveiling R4IoT, Forescout launched our own threat detection and response solution, Forescout Threat Detection & Response<\/a>, part of the Forescout Platform. The following video tells the full story of what an R4IoT attack looks like and how Forescout Threat Detection & Response can work with your other security tools, including almost any endpoint detection and response (EDR) solution, to detect a cross-device attack like R4IoT as it unfolds, alert the SOC of a true threat and initiate policy-based remediation. There’s also a companion eBook<\/a>.<\/p>\n

Enjoy the video. Then, read on to understand the anatomy of a ransomware attack involving IoT.<\/p>\n