More than 40,000 security cameras worldwide are exposed online, cybersecurity firm Bitsight warns.
See also: Smart devices pose a growing cybersecurity risk
These cameras operate over HTTP or RTSP (Real-Time Streaming Protocol) and stream their live image to anyone who knows IP address , directly through a browser. This makes them unwitting tools for cyberattacks, espionage, blackmail and surveillance, according to the company.
HTTP-based security cameras use standard web technologies for video transmission and control and are typically found in homes and small offices, Bitsight says. Some of them are fully exposed to the internet, allowing access to their management interface and live feed without restrictions. Others require authentication, but it is possible to return snapshots from their live feed if the user knows the correct URI and the required parameters via the implemented API.
On the other hand, RTSP cameras are optimized for continuous low-latency video streaming and are mainly used in professional surveillance systems. They are more difficult to fingerprint, but have been found to respond to generic URIs, returning snapshots of live stream .
See also: Ecovacs robot vacuum cleaners spy on their owners
Of the more than 40,000 cameras that expose their live image to the internet, over 14,000 are located in the United States, while Japan ranks second with about 7,000 devices. Austria, the Czech Republic and South Korea each have about 2,000 exposed cameras, while Germany, Italy and Russia each have about 1,000.
In the US, the most exposed security cameras are located in California and Texas, followed by Georgia, New York and Missouri, according to Bitsight. Massachusetts and Florida also have a high concentration of such cameras.
In terms of the sectors affected, the telecommunications sector is the most affected, accounting for 79% of the exposed cameras.
According to Bitsight, malicious actors are actively seeking out exposed security cameras, with intense activity and discussions on dark web.
Even if some of these devices don't seem to pose a direct threat to privacy, they can be part of botnets or used as entry points into an organization's internal network. Bitsight has identified a large number of such cameras in offices, factories, restaurants, hotels, gyms, small shops and other locations.
See also: AI camera detects drunk drivers
To protect these security cameras, users should secure their internet connection, change default login details, disable remote access if not necessary, keep devices up to date, and monitor them for unusual login attempts.
Source: securityweek
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
