Security researchers at Forescout used common IoT devices, such as IP cameras, smart lights, motion sensors, and more, to see how hackers could use them to gain unauthorized access to networks. According to the research, hackers can gain access remotely and hide their tracks.
The researchers chose these IoT devices because they were popular and commercially available. A Raspberry Pi.
The existence of serious bugs that could allow a hacker to remotely execute code and gain complete control of a camera is a very serious issue. Cameras are commonly used to enhance security (building surveillance cameras, etc.) and security personnel rely heavily on them and the footage they display. IoT cameras are one of the favorite targets of hackers.
IP cameras can contain vulnerabilities security that could allow attackers to gain access to a network. They often lack robust security protocols. For example, default credentials login.
In fact, using default credentials is a very common occurrence.
The researchers, taking advantage of the above, gained access to cameras (connected to the internet).
They carried out a man-in-the-middle attack between the camera and the administrator's computer and were able to secretly monitor and change the flow between the two systems.
They then ran a set of scripts to force the camera to end its current recording. However, they managed to influence the camera without leaving any traces behind.
"We exploited some common vulnerabilities - if you're on the same network, you can essentially stop the camera stream and replace it with previously recorded video," one of the researchers said.
Such an attack is very dangerous because it can have serious consequences. Exploiting a security camera could allow attackers to gain physical access to a building.
Hackers can exploit IoT devices to carry out many different attacks.
More and more organizations are adopting IoT technology. But when devices have vulnerabilities and are not updated, they will put businesses at risk.
The researchers conducted these tests to see how vulnerable IoT devices are.
One of the researchers said: "If you know the problem, you can do something to address it. Isolate the devices and make sure they are on their own network, make sure you are not using default settings , and educate yourself on the correct and secure way to operate them."
