What is Camjacking? The way in which the attacker uses the computer's camera without the user's knowledge to send the photos to his own space. Of course, there is a possibility that he can also use the microphone!!!
In future versions, the attack method will be improved and the microphone will also be used.
In the following PoC I will show you how a hacker can trick the user and open his Camera himself. Of course, the methods vary in terms of sending the file that the user must execute and know that no Antivirus will save you from the following attack. It could very well be a link from a friend of yours!
The attacker can create an attractive page and in order for the user to be able to browse, they will have to open their camera by clicking OK on the message that will be displayed since most people do not read the messages of Firefox, Chrome, etc.
Let's assume you clicked on the link and it opened the attractive page we were talking about. Of course, mine aren't that attractive 🙂
1) Use of camera.
2) Here I have added 2 images, the first is what the camera sees but… You will not see anything like that!!!! Because the hacker will simply hide it…. This is what the second image describes to us.
How is this done? Very simply, in the CSS file I have put “opacity:0.0″
3) Below we see the folder on the attacker's server which is currently empty.
Food for the mind
- https://developer.mozilla.org/en-US/docs/Web/API/Canvas_API/Tutorial/Basic_usage
- https://developer.mozilla.org/en-US/docs/NavigatorUserMedia.getUserMedia
Source: secnews.gr
