Article Read Time
3 Million Smart Toothbrushes Used in a DDoS Attack!

According to the Swiss newspaper “Aargauer Zeitung,” hackers took over three million smart toothbrushes to carry out a Distributed Denial of Service (DDoS) attack. This attack caused a Swiss company to go offline for several hours, resulting in millions of euros in damages. It may sound like something out of a sci-fi movie, but these seemingly harmless bathroom gadgets were used as part of a botnet army to carry out the attack.
So, is it true?
Despite widespread reporting, the alleged hacking of millions of smart toothbrushes to create a botnet DDoS army lacks credible evidence. As experts in the cybersecurity field, we have been unable to substantiate this claim and remain skeptical of its validity.
It has been reported that the compromised toothbrushes were using Java, a popular language for Internet of Things (IoT) devices. Once infected, a global network of malicious toothbrushes launched their successful attack, but further details are scarce. The repurposed toothbrushes reportedly flooded a Swiss website with bogus traffic, knocking services offline and causing widespread disruption.
Several well-respected industry veterans have come out on social media calling BS on the claim.
The rapid expansion of the Internet of Things (IoT) in our daily lives has created an ever-growing threat landscape that cannot be ignored. However, this also gives us an opportunity to take a proactive approach to securing our privacy and personal information. By being vigilant and taking the necessary precautions, we can protect ourselves and contribute to the security of our national infrastructure and economic stability.
Most smart toothbrushes currently available are equipped with Bluetooth Low Energy technology, although some models are also WiFi-enabled. However, the possibility of three million smart toothbrushes being hacked is debatable.
It’s essential to take the threat from the Internet of Things devices seriously, as DDoS attacks exploiting these devices have occurred in the past.
What should you do to ensure your IoT devices aren’t compromising your security or being used as weapons against others? A good first step is an independent scan of your organization’s network, looking for vulnerabilities. You’re in luck! Commonwealth Sentinel is here to help. We offer a wide range of services to help. Our dedicated team of experts supports you with software and hardware solutions, training, and policy implementation. Your concerns matter to us, and we are delighted to provide a complimentary and confidential consultation with our advisors to discuss them. This service is entirely free and could provide you with valuable insights. To schedule a consultation, click here or contact us at (502) 320-9885.