The glaring omission here is the classification of the products effected!
Keep in mind that these types of products fall into different classifications:
- wireless local LAN access only - wireless local LAN access only and broadcasts to fixed IP address (local NAS) - wireless and creates hole in P&P firewall to gain access remotely - wireless and broadcasts to Cloud server
So while the two former device types would require a hacker to gain access to the users local LAN, the latter two device types can be hacked at ether the device (because of mentioned hole in firewall) or remote Cloud server level.
It should be mentioned that camera's that are blindly streaming unencrypted video to a remote Cloud server could have their streaming packets captured by 3rd parties.
Many of the "inexpensive" providers/OEM's of security CAM's target making any profit on 'the back end' (IE: Monthly Cloud Storage/Access fees) and if the user opts out of using the paid storage any remote access to their device involves creating holes in their LAN firewall exposing their device directly to the entire internet.
A disturbing Telegram group has been found selling private footage from hacked security cameras placed in bedrooms, dressing rooms, toilets and spas around Vietnam. The hackers offer three tiers of paid access to the camera footage, claiming that "all footage is dark corners and hot scenes from families". Security experts point to poor password hygiene as being a major cause behind such hacks.
Deutsch
English
Español
Français
Italiano
Nederlands
Polski
Português
Русский
Türkçe
Svenska
Chinese
Magyar