Researchers from Kaspersky took an in-depth look at Internet of Things devices, more specifically on the lack of security measures of the said gadgets, in a report published online.
The results of the experiments carried out for the report further show the vulnerability of Internet of Things devices to hackers, even after years of clamor to improve the security measures of the devices.
The researchers selected four Internet of Things devices to test for the report, with the devices intensely analyzed for any flaws in security. The results have turned out to be worrying, as hackers can chain together attacks to completely gain access to smart homes.
The first device analyzed in the report is Google's Chromecast, which hackers can take advantage of using the so-called "rickrolling" vulnerability of the device. Through the vulnerability, hackers can hijack what the TV shows, potentially displaying messages that would trick users into changing their passwords or resetting their router to default factory settings, which will open up the device and the user's network to the hackers.
The second device is a smart coffee maker that can be controlled through a smartphone app. The coffee maker was found to have a vulnerability that can expose the password of the user's Wi-Fi network, which would in turn allow hackers to gain control of the network and all the connected devices.
The researchers also examined an IP camera, which is used in baby monitors and webcams. Continuing the scenario that the researchers have played out, the hackers that gained access to the Wi-Fi network of the home can take control of IP cameras and monitor when the smart home's owners are out of the house.
Lastly, the researchers examined a home security system. Once the smart home's owners have left, hackers could launch attacks against the system. The researchers, however, found that the home security system they were testing was well protected, but only on the software side. The hardware component of the home security system, on the other hand, was found to have the vulnerability of motion and contact sensors being tricked by a powerful magnet. This would allow hackers to open windows and doors without setting off alarms. In addition, because the motion sensors could only see warm objects, criminals that put on cold clothes would mask their body heat so that they would not be detected.
Just how secure are Internet of Things devices that are out in the market today? According to the findings of the Kaspersky researchers, not all that much, which should worry smart home owners.
