15K Private Webcams Could Let Attackers View Homes, Businesses

Webcams could be potentially accessed and manipulated by anyone with an Internet connection, researchers say.

More than 15,000 webcams, many of which are located inside peoples homes, are potentially accessible to anyone with an Internet connection. Researchers at Wizcase who discovered the cameras say many are vulnerable to attackers who could steal data or adjust the settings.
These devices seem to be prone to being accessed remotely if no additional security measures are taken after installation, said Wizcase Web security expert Chase Williams in a blog post. Quite a few have easily predictable and default credentials to achieve admin access, he said.
Several types of popular webcams are affected: AXIS net cameras, Cisco Linksys webcam, IP Camera Logo Server, IP WebCam, IQ Invision Web camera, Mega-Pixel IP Camera, Mobotix, WebCamXP 5, and Yawcam. Thousands of these devices are exposed around the world, Williams wrote, and they compromise data belonging to individuals, families, and businesses.
Researchers at Wizcase, which tests and evaluates cybersecurity tools and products, were able to access cameras inside the kitchens, living rooms, and offices of private family homes, where they could see people talking on the phone and kids peering into the camera lens. Some of the webcams they analyzed provided a direct look into storage units, churches, mosques, tennis courts, museum security feeds, hotels, parking lots, and more.
While they couldnt determine a devices owner based on technical information alone, researchers could use context from videos and administrative access to unearth user data and estimate the webcams geolocation. In rare cases, they could figure out its owner. In exploring implications for these devices, Williams pointed to the potential for settings and credentials to be changed, government agencies to monitor users, stores to peek into competitor businesses, or personally identifiable information to be used in identity theft.
As people continue to connect their household devices to the Internet, you can expect to see more of this sort of privacy breach, particularly as organizations lacking the skills or experience to build such products leap onto the IoT bandwagon, says Stephen Gailey, head of solutions architecture at Exabeam.
Read more details
here
.
Check out
The Edge
, Dark Readings new section for features, threat data, and in-depth perspectives. Todays top story:
How a PIA Can CYA
.

Last News
▸ Some DLP Products Vulnerable to Security Holes ◂ Discovered: 23/12/2024 Category: security	▸ Scan suggests Heartbleed patches may not have been successful. ◂ Discovered: 23/12/2024 Category: security	▸ IoT Devices on Average Have 25 Vulnerabilities ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
15K Private Webcams Could Let Attackers View Homes, Businesses