NOKIA Nokia Oyj

Nokia Threat Intelligence Report finds malicious IoT botnet activity has sharply increased

Nokia Threat Intelligence Report finds malicious IoT botnet activity has sharply increased

Press release 

Nokia Threat Intelligence Report finds malicious IoT botnet activity has sharply increased

  • Number of IoT devices (bots) engaged in botnet-driven DDoS attacks rose from around 200,000 a year ago to approximately 1 million devices



7 June 2023

Espoo, Finland – The latest Nokia Threat Intelligence Report released today has found that IoT botnet DDoS (Distributed Denial of Service) traffic, originating from a large number of insecure IoT devices with the aim of disrupting telecom network services for millions of users, increased fivefold over the past year, following Russia’s invasion of Ukraine and stemming from the growing increase in profit-driven hacking collectives operated by cybercriminals.

This sharp increase, also supplemented by the increased use of IoT devices by consumers around the world, was first noticed at the beginning of the Russia-Ukraine conflict but has since spread to other parts of the world, with botnet-driven DDoS attacks being used to disrupt telecom networks as well as other critical infrastructure and services. The number of IoT devices (bots) engaged in botnet-driven DDoS attacks rose from around 200,000 a year ago to approximately 1 million devices, generating more than 40% of all DDoS traffic today.

The most common malware in telecommunication networks was found to be a bot malware that scans for vulnerable devices, a tactic associated with a variety of IoT botnets. There are billions of IoT devices worldwide, ranging from smart refrigerators, medical sensors, and smart watches; many of which have lax security protections.

The Threat Intelligence Report also found that the number of trojans targeting personal banking information in mobile devices has doubled to 9%, putting millions of users around the world at heightened risk of having their personal financial and credit card information stolen. A trojan is nefarious software code disguised as being safe for use.

The report, however, did find some encouraging news, showing that malware infections in home networks declined from a Covid-high of 3% to 1.5%, close to the pre-pandemic level of 1%, as malware campaigns targeting the wave of at-home workers tapered off, and more people returned to office work environments.

Those findings are based on data aggregated from monitoring network traffic on more than 200 million devices globally where Nokia NetGuard Endpoint Security product is deployed.

The Threat Intelligence Report is compiled by experts at the Threat Intelligence Center in Canada, the Nokia Cyber Security Center in France; the Nokia Security Operations Center in India; and Nokia Deepfield, a part of Nokia focusing on software applications covering network analytics and DDoS security.

Hamdy Farid, Senior Vice President, Business Applications at Nokia said: “The key findings in this report underline both the scale and sophistication of cybercriminal activity today. A single botnet DDoS attack can involve hundreds of thousands of IoT devices, representing a significant threat to networks globally. To mitigate the risks, it’s essential that service providers, vendors, and regulators work to develop more robust 5G network security measures, including implementing telco-centric threat detection and response, as well as robust security practices and awareness at all company levels.”

Resources and additional information

Web page:

Web page:

Web page:

About Nokia

At Nokia, we create technology that helps the world act together.

As a B2B technology innovation leader, we are pioneering networks that sense, think and act by leveraging our work across mobile, fixed and cloud networks. In addition, we create value with intellectual property and long-term research, led by the award-winning Nokia Bell Labs.

Service providers, enterprises and partners worldwide trust Nokia to deliver secure, reliable and sustainable networks today – and work with us to create the digital services and applications of the future.

Media Inquiries

Nokia Communications, Corporate

Email:

Follow us on social media

Test



EN
07/06/2023

Underlying

To request access to management, click here to engage with our
partner Phoenix-IR's CorporateAccessNetwork.com

Reports on Nokia Oyj

 PRESS RELEASE

Nokia and AWS showcase industry-first agentic AI-powered network slici...

Nokia and AWS showcase industry-first agentic AI-powered network slicing with du and Orange Nokia and AWS showcase industry-first agentic AI-powered network slicing with du and Orange Industry-first intent-based 5G-Advanced slicing with agentic AI offers telecommunication providers with premium network slicing services that respond to real-world situations and enable autonomous intelligence.This breakthrough innovation inferences and leverages open Internet data, including traffic, events, locations, maps and operator data for network slicing business.du and Orange first to explore this ...

 PRESS RELEASE

Nokia Corporation - Managers' transactions (Fisk)

Nokia Corporation - Managers' transactions (Fisk) Nokia CorporationManagers’ transactions20 February 2026 at 16:00 EETNokia Corporation - Managers' transactions (Fisk) Transaction notification under Article 19 of EU Market Abuse Regulation.____________________________________________Person subject to the notification requirementName: Fisk, LouisePosition: Other senior manager Issuer: Nokia CorporationLEI: 549300A0JPRWG1KI7U06Notification type: INITIAL NOTIFICATIONReference number: 144065/5/4____________________________________________ Transaction date: 2026-02-19Venue: NASDAQ HELSINKI LT...

 PRESS RELEASE

Nokia Oyj - Johtohenkilöiden liiketoimet (Fisk)

Nokia Oyj - Johtohenkilöiden liiketoimet (Fisk) Nokia OyjJohtohenkilöiden liiketoimet20.2.2026 klo 16.00Nokia Oyj - Johtohenkilöiden liiketoimet (Fisk) Markkinoiden väärinkäyttöasetuksen 19. artiklan mukainen ilmoitus liiketoimesta.____________________________________________IlmoitusvelvollinenNimi: Fisk, LouiseAsema: Muu ylin johto Liikkeeseenlaskija: Nokia CorporationLEI: 549300A0JPRWG1KI7U06Ilmoituksen luonne: ENSIMMÄINEN ILMOITUSViitenumero: 144065/5/4____________________________________________ Liiketoimen päivämäärä: 2026-02-19Kauppapaikka: NASDAQ HELS...

 PRESS RELEASE

Nokia Corporation - Managers' transactions (Heard)

Nokia Corporation - Managers' transactions (Heard) Nokia CorporationManagers’ transactions20 February 2026 at 16:00 EETNokia Corporation - Managers' transactions (Heard) Transaction notification under Article 19 of EU Market Abuse Regulation.____________________________________________Person subject to the notification requirementName: Heard, DavidPosition: Other senior manager Issuer: Nokia CorporationLEI: 549300A0JPRWG1KI7U06Notification type: INITIAL NOTIFICATIONReference number: 144067/5/4____________________________________________ Transaction date: 2026-02-19Venue: NASDAQ HELSINKI ...

 PRESS RELEASE

Nokia Oyj - Johtohenkilöiden liiketoimet (Heard)

Nokia Oyj - Johtohenkilöiden liiketoimet (Heard) Nokia OyjJohtohenkilöiden liiketoimet20.2.2026 klo 16.00Nokia Oyj - Johtohenkilöiden liiketoimet (Heard) Markkinoiden väärinkäyttöasetuksen 19. artiklan mukainen ilmoitus liiketoimesta.____________________________________________IlmoitusvelvollinenNimi: Heard, DavidAsema: Muu ylin johto Liikkeeseenlaskija: Nokia CorporationLEI: 549300A0JPRWG1KI7U06Ilmoituksen luonne: ENSIMMÄINEN ILMOITUSViitenumero: 144067/5/4____________________________________________ Liiketoimen päivämäärä: 2026-02-19Kauppapaikka: NASDAQ HE...

ResearchPool Subscriptions

Get the most out of your insights

Get in touch