CyberMark has revealed a serious security breach in Truffoo's smart vacuum cleaners • The hack allows you to take photos indoors without your knowledge and even map it
Checkmarx's cyber company revealed on Wednesday a security vulnerability in a smart robotic vacuum cleaner that allows hackers and burglars to penetrate the robot and take intimate photos inside the robot's homes. The discovery was made as part of a study conducted by the company's research team on several IoT devices that can be found today in homes and workplaces.
Hacking Robotic Vacuum Cleaner by Trypo Company
The vacuum cleaner in question is a robotic cleaner made by Trifo, and the device has identified several serious and medium-grade security weaknesses through which an attacker can easily obtain video footage from any manufacturer's robotic cleaner, connected to the Internet. This way, the hacker can "spy" on our home space, bypassing privacy permissions.
The robot, which is connected to Wi-Fi, toured the house and photographed the various rooms - about six feet or more, so you can get a nearly complete picture of the house and its inhabitants. In addition, hackers can identify and map the home location - by identifying the network, taking a photo from the robot's camera, and obtaining the robot's home mapping data. In the office you can use the cleaner to get photos, location and map of the room.
According to the company, it reported a breach several times to the manufacturer and even disclosed to it the full report. However, according to the company, no response and breach has been received yet. In light of this, CheckMarks recommends those using the robot's vacuum cleaner The company cover the device camera.
According to Erez Yelon, head of the company's research team, "Whenever we as consumers access such a device remotely via a mobile phone, we actually open a new risk, a kind of back door for the home network and all other connected devices in the home, including the computer. The risk. "
It should be noted that this year Trifu launched a robotic vacuum cleaner equipped with a wide-angle web video camera that covers the front and also the area above the cleaner, as well as a two-way microphone. This vacuum cleaner allows home invaders to listen to them and even update the owners so they can try them or call police. However, according to CheckMarks, these cleaners have a security vulnerability that has not yet been fixed.
