Secure your privacy and keep spying eyes out of your home
“Yo, what’s up?”
When asked by a friend or coworker, this question typically garners a friendly smile and genial response. But when a disembodied voice eerily asks this question through one of the IoT devices in your home, as one California mom experienced, it’s about the furthest thing from being friendly that you can find.
According to local TV station KCAL9, Tammy had purchased a Ring camera to be able to check in on her ailing dog whenever she wanted. She set the camera in the bedroom, and less than a month later, she was hacked.
First she had to get over the shock of hearing the stranger’s voice try to engage her in conversation, then she casually approached the Ring camera and turned its lens to the wall. Once she did that, the stranger’s taunts got uglier and cruder. Then the hacker set off all the alarms in Tammy’s house, disturbingly showing off the breadth of his reach.
Millions of us are constantly adding IoT devices to our homes – digital speakers, security cameras, and smart doorbells, to say nothing about all the connected clocks, thermostats, lights, and more. Each one of these is an attack surface, and we are only increasing the number of targets we offer hackers with each device we add. Of all these devices though, perhaps the most common target is the webcam.
“Hacking webcams is more common than people think,” says Jan Sirmer, Malware Analysis Team Lead at Avast, “largely because of how easy it is to do, how inconspicuous it is to the victim, and how pervasive webcams are. They are everywhere, and they are frequently used, particularly now. They’ve been integrated into our computers, our mobile phones, and our tablets. We use them for home security, professional purposes, and as baby monitors.”
Nightmare situations such as Tammy’s are far too common for comfort, yet they are typically caused by the same user errors every time. Each of us has the power to poke those spying eyes right in the pupils if we follow these 5 tips for better webcam security.
Go ahead and build that smart home. And don’t be afraid to connect those IoT devices. Just be responsible by taking the cybersecurity of your home as seriously as you take its physical security. And remember that every device needs to be protected, even if it doesn’t have a camera or hold sensitive data, because each connection to the internet is a foothold that bad actors can use to compromise your entire network. Webcams and IoT in general will continue to provide us with wonderfully enriching rewards, as long as we each do our own part to mitigate the equally sized risks that come with them.
Join Avast's Avast's Christopher Budd at the National Council on Aging's Age+Action Conference to learn how to protect elders from tech support scams.
Avaddon ransomware group targeted Asia-based insurer AXA with DDoS attacks and ransomware just a week after the insurance company announced it was dropping support for ransomware payments in France.