Hacked security cam footage from bedrooms, dressing rooms, spas found to be on sale on Telegram group

[Redaktion]

A disturbing Telegram group has been found selling private footage from hacked security cameras placed in bedrooms, dressing rooms, toilets and spas around Vietnam. The hackers offer three tiers of paid access to the camera footage, claiming that "all footage is dark corners and hot scenes from families". Security experts point to poor password hygiene as being a major cause behind such hacks.

https://www.notebookcheck.net/Hacked-security-cam-footage-from-bedrooms-dressing-rooms-spas-found-to-be-on-sale-on-Telegram-group.786160.0.html

[George]

sigh

The glaring omission here is the classification of the products effected!

Keep in mind that these types of products fall into different classifications:

- wireless local LAN access only
- wireless local LAN access only and broadcasts to fixed IP address (local NAS)
- wireless and creates hole in P&P firewall to gain access remotely
- wireless and broadcasts to Cloud server

So while the two former device types would require a hacker to gain access to the users local LAN, the latter two device types can be hacked at ether the device (because of mentioned hole in firewall) or remote Cloud server level.

It should be mentioned that camera's that are blindly streaming unencrypted video to a remote Cloud server could have their streaming packets captured by 3rd parties.

Many of the "inexpensive" providers/OEM's of security CAM's target making any profit on 'the back end' (IE: Monthly Cloud Storage/Access fees) and if the user opts out of using the paid storage any remote access to their device involves creating holes in their LAN firewall exposing their device directly to the entire internet.