Why is xIoT becoming a primary attack vector?

Attackers are increasingly targeting xIoT because:
• IT endpoints are increasingly difficult to hack; devices are now the low hanging fruit
• They are poorly managed and rarely patched
• They often have default credentials or weak configurations
• They provide a path for lateral movement into IT systems

Example attack pattern:
• Initial access blocked on IT systems
• Attacker scans for unmanaged xIoT devices
• Compromises an IoT device (e.g., camera)
• Uses it to deploy ransomware or move laterally (e.g. Akira ransomware attack)

👉 xIoT devices are becoming a backdoor into otherwise secured environments