This article was 1st published on our sister Site, The Internet Of All Things.
New research has thrown up a worrying scenario – hundreds of brands of security cameras, baby monitors, and “smart” doorbells have serious vulnerabilities that allow hackers to hijack devices and spy on their owners.
Paul Marrapese, an OSCP-certified security engineer from the Bay Area, California, USA, who was part of the independent research has posted that affected devices use “peer-to-peer” features (also known as “P2P”) that allow users to connect to their devices the moment they come Online. Hackers are able to exploit flaws in these features to rapidly find vulnerable cameras, then launch attacks to access them – all without the owner’s knowledge.
Over 2 million vulnerable devices have been identified on the Internet, including those distributed by HiChip, TENVIS, SV3C, VStarcam, Wanscam, NEO Coolcam, Sricam, Eye Sight, and HVCAM. Affected devices use a component called iLnkP2P. Unfortunately, iLnkP2P is used by hundreds of other brands as well, making identification of vulnerable devices difficult, said Paul.
Click here to read the rest of the piece.
