This document discusses Internet of Things (IoT) attacks and how to prevent them. It defines IoT as networks of physical objects embedded with sensors and software to connect and exchange data over the Internet. IoT attacks gain access to users' sensitive data through weak IoT devices by installing malware or harming devices. Types of attacks include influencing temperature control systems. To prevent attacks, strong and regularly changed passwords, two-factor authentication, data backups, encryption, limited access, software updates, security audits, device configuration and recovery policies are recommended.