FBI ‘Drive-By’ Hacking Threat Just Got Real: Why You Should Be Concerned

Digital assistants, fitness trackers, home security devices, thermostats, remote-controlled robots, gaming systems, and talking stuffed animals … What these things all have in common is that they send and receive data. But do you know where it is going?
Digital assistants, fitness trackers, home security devices, thermostats, remote-controlled robots, gaming systems, and talking stuffed animals … What these things all have in common is that they send and receive data. But do you know where it is going?

October 7, 2020 – In Breaking News – Forbes

Warnings that our IoT devices might be spying on us are nothing new—remember the smart speaker fiasco last year?

But at least we expect those devices to be listening and can exercise some caution.

The latest such warning, though, takes these risks to a new level. It turns out that there may be surprising little spies hiding in our living rooms.

Last December, the FBI warned that the perilous state of IoT security means that “hackers can use an innocent device to do a virtual drive-by of your digital life.”

Hackers can use an innocent device to do a virtual drive-by of your digital life.
Unsecured devices can allow hackers a path into your router, giving the bad guy access to everything else on your home network that you thought was secure.

A week earlier, that same FBI office had cautioned on the danger that smart TVs can allow “manufacturers, streaming services, and even hackers an open door into your home.”

Now a new security report from the team at Guardicore, issued today, has combined those two FBI alerts, showing just how easy it is to exploit vulnerabilities in our everyday devices.

And this isn’t a data theft risk—it’s much more creepy, playing like something from a spy thriller.

It’s an attack scenario that “conjures up the famous ‘van parked outside’ scene in every espionage film in recent memory,” Guardicore says.

“At the low end of the risk spectrum,” the FBI warned on smart TVs, “they can change channels, play with the volume, and show your kids inappropriate videos.”

“In a worst-case scenario, they can turn on your bedroom TV’s camera and microphone and silently cyberstalk you.”

(The FBI issued a statement earlier this month warning consumers about smart home devices that could be vulnerable to hacks. Courtesy of TomoNews US and YouTube. Posted on Dec 12, 2019.)

In its report, issued today, Guardicore says it has proven that a standard voice-enabled TV remote can be hijacked to be used as a secret listening device, accessed and attacked remotely from a vehicle out in the street.

The team says it was able to remotely attack and then trigger this eavesdropping on demand, operating continually if required—subject to battery life, transmitting private conversations.

Continue reading… FBI ‘Drive-By’ Hacking Threat Just Got Real: Here’s Why You Should Be Concerned

Learn More…

Building a digital defense in your Internet of Things.

Every IoT device you buy and power on at home, every device you add to your WiFi network, increases you risk. And where those devices are cheap IoT units, from unknown sources, those risks increase materially. If your TV or remote or speaker or fridge or toy or gadget is listening for trigger words or has the ability to transmit audio and video, then you’re taking it on trust it’s not doing so maliciously or has been compromised. (Courtesy of Forbes)
Every IoT device you buy and power on at home, every device you add to your WiFi network, increases you risk. And where those devices are cheap IoT units, from unknown sources, those risks increase materially. If your TV or remote or speaker or fridge or toy or gadget is listening for trigger words or has the ability to transmit audio and video, then you’re taking it on trust it’s not doing so maliciously or has been compromised. (Courtesy of Forbes)

Courtesy of the Oregon FBI’s Tech Tuesday

Last week we talked about smart TVs—and how that built-in Internet connection can allow manufacturers, streaming services, and even hackers an open door into your home.

This week, we are looking at the larger Internet of Things (IoT).

Basically, this means everything else in your home that connects to the world wide web.

If you look at the holiday wish lists that your kids, spouse, and parents conveniently dropped on you last week at Thanksgiving—most everything on there probably makes the cut.

Digital assistants, smart watches, fitness trackers, home security devices, thermostats, refrigerators, and even light bulbs are all on the list.

Add to that all of the fun stuff: remote-controlled robots; games and gaming systems; interactive dolls; and talking stuffed animals … well, the list seems endless.

(The FBI is alerting parents that “smart” toys that connect to the internet can put a family’s privacy and even its safety at risk. Courtesy of TODAY and YouTube. Posted on Jul 19, 2017.)

What these all have in common is that they send and receive data.

But do you know how that data is collected? And where it is going?

Another concern is that hackers can use that innocent device to do a virtual drive-by of your digital life.

Unsecured devices can allow hackers a path into your router, giving the bad guy access to everything else on your home network that you thought was secure.

Are private pictures and passwords safely stored on your computer? Don’t be so sure.

Here’s what you can do to build that digital defense:

  • Change the device’s factory settings from the default password.

    • A simple Internet search should tell you how—and if you can’t find the information, consider moving on to another product.

  • Passwords should be as long as possible and unique for IoT devices.

Unsecured devices can allow hackers a path into your router, giving the bad guy access to everything else on your home network that you thought was secure.
Hackers can use an innocent device to do a virtual drive-by of your digital life.
  • Many connected devices are supported by mobile apps on your phone.

    • These apps could be running in the background and using default permissions that you never realized you approved.

    • Know what kind of personal information those apps are collecting and say “no” to privilege requests that don’t make sense.

  • Secure your network.

    • Your fridge and your laptop should not be on the same network.

    • Keep your most private, sensitive data on a separate system from your other IoT devices.

  • Make sure all your devices are updated regularly.

    • If automatic updates are available for software, hardware, and operating systems, turn them on.

As always, if you have been victimized by a cyber fraud, be sure to report it to the FBI’s Internet Crime Complaint Center at ic3.gov or call your local FBI office.

FBI Internet Crime Complaint Center (IC3) Nominated in 2020 ‘ASTORS’ Awards

2019 'ASTORS' Awards Program Banquet Luncheon
2019 ‘ASTORS’ Awards Program Banquet Luncheon

The mission of the Internet Crime Complaint Center, also known as IC3, is to provide the public with a reliable and convenient reporting mechanism to submit information to the Federal Bureau of Investigation (FBI) concerning suspected Internet-facilitated criminal activity and to develop alliances with law enforcement and industry partners.

Information is analyzed and disseminated for investigative and intelligence purposes to law enforcement and for public awareness.

(Actress Kirsten Vangsness, who plays tech-savvy FBI analyst Penelope Garcia on the show Criminal Minds, is intended to promote awareness of Internet crimes and scams and encourages the public to report suspected criminal cyber activity to the Internet Crime Complaint Center (IC3). Courtesy of the Federal Bureau of Investigation and YouTube.)

Since 2000, the IC3 has received complaints crossing the spectrum of cyber crime matters, to include online fraud in its many forms including intellectual property rights (IPR) matters, computer intrusions (hacking), economic espionage (theft of trade secrets), online extortion, international money launderingidentity theft, and a growing list of Internet facilitated crimes.

It has become increasingly evident that, regardless of the label placed on a cyber crime matter, the potential for it to overlap with another referred matter is substantial.

Therefore, the IC3, formerly known as the Internet Fraud Complaint Center (IFCC), was renamed in October 2003 to better reflect the broad character of such matters having an Internet, or cyber, nexus referred to the IC3, and to minimize the need for one to distinguish “Internet Fraud” from other potentially overlapping cyber crimes.

Enter today to Compete in the 2020 ‘ASTORS’ Homeland SecurityAwards at https://americansecuritytoday.com/ast-awards/.

AST-Image-of-Eagle-and-Flag-resized-2

The Annual ‘ASTORS’ Awards Program is specifically designed to honor distinguished government and vendor solutions that deliver enhanced value, benefit and intelligence to end users in a variety of government, homeland security and public safety vertical markets.

The Annual ‘ASTORS’ Awards is the preeminent U.S. Homeland Security Awards Program highlighting the most cutting-edge and forward-thinking security solutions coming onto the market today, to ensure our readers have the information they need to stay ahead of the competition, and keep our Nation safe – one facility, street, and city at a time.

2019 ‘ASTORS’ Homeland Security Awards Luncheon at ISC East

Final nominations are now being accepted for the 2020 ‘ASTORS’ Homeland Security Awards at https://americansecuritytoday.com/ast-awards/.

Comprehensive List of Categories Include:

Access Control/ Identification Personal/Protective Equipment Law Enforcement Counter Terrorism
Perimeter Barrier/ Deterrent System Interagency Interdiction Operation Cloud Computing/Storage Solution
Facial/IRIS Recognition Body Worn Video Product Cyber Security
Video Surveillance/VMS Mobile Technology Anti-Malware
Audio Analytics Disaster Preparedness ID Management
Thermal/Infrared Camera Mass Notification System Fire & Safety
Metal/Weapon Detection Rescue Operations Critical Infrastructure
License Plate Recognition Detection Products And Many Others!

Don’t see a Direct Hit for your Product, Agency or Organization?

Submit your category recommendation for consideration to Michael Madsen, AST Publisher at: mmadsen@americansecuritytoday.com.

The 2019 ‘ASTORS’ Awards Program surpassed expectations with a record number of nominations received from industry leaders and government agencies, and drew over 200 attendees to the ‘ASTORS’ Awards Presentation Banquet – an exclusive gourmet luncheon and networking opportunity which filled to capacity, before having to turn away late registrants.

The 2019 ‘ASTORS’ Awards Luncheon featured an impassioned and compelling keynote address by William (Bill) Bratton, former police commissioner of the NYPD twice, the BPD, and former chief of the LAPD, on the history of policing in America and the evolution of critical communication capabilities in our post 9/11 landscape.

The event featured an impassioned and compelling keynote address by William J. Bratton, former police commissioner of the New York Police Department (NYPD) twice, the Boston Police Department (BPD), and former chief of the Los Angeles Police Department (LAPD), as he walked attendees through 50 years of American policing history, the impacts on the communities, and the evolution of critical communication capabilities in our post 9/11 landscape.

Commissioner Bratton, one of the world’s most respected and trusted experts on risk and security issues and Executive Chairman of Teneo Risk a global advisory firm, was recognized as the ‘2019 ‘ASTORS’ Person of the Year’ for his Lifetime of Dedication and Extraordinary Leadership in Homeland Security and Public Safety.

Why the ‘ASTORS’ Homeland Security Awards Program?

2019 ‘ASTORS’ Homeland Security Awards Luncheon at ISC East

American Security Today’s comprehensive Annual Homeland Security Awards Program is organized to recognize the most distinguished vendors of physical, IT, port security, law enforcement, and first responders, in acknowledgment of their outstanding efforts to ‘Keep our Nation Secure, One City at a Time.’

Over 200 distinguished guests representing Federal, State and Local Governments, and Industry Leading Corporate Firms, gathered from across North America, Europe and the Middle East to be honored among their peers in their respective fields which included: 

  • The Drug Enforcement Administration (DEA)
  • National Center for Missing and Exploited Children (NCMEC)
  • United States Marine Corps
  • The Federal Protective Service (FPS)
  • Argonne National Laboratory (ANL)
  • United States Postal Inspection Service
  • DHS S&T 
  • United States Marshals Service (USMS)
  • The Port Authority of New York & New Jersey Police (PAPD)
  • The Department of Justice (DOJ)
  • The New York State Division of Homeland Security & Emergency Services (NYS DHSES)
  • United States Border Patrol
  • AlertMedia, Ameristar Perimeter Security, Attivo Networks, Automatic Systems, Bellevue University, BriefCam, Canon U.S.A., CornellCookson, Drone Aviation, FLIR Systems, Hanwha Techwin, HID Global, IPVideo Corp., Konica Minolta Business Solutions, LenelS2, ManTech, Regroup Mass Notifications, SafeLogic, SolarWinds, Senstar, ShotSpotter, Smiths Detection, TCOM LP, Trackforce, Verint, and More!

From innovative Military Cyber Programs, to LocalState and Federal Public Safety and Emergency Management Initiatives, New Physical and IT Products and Services, and Security Professional, Threat Assessment, Emergency Preparedness, Law Enforcement and Homeland Security Education and Training Opportunities – Join your ‘ASTORS’ Award-Winning Peers and Receive the Recognition You Deserve!

Excellence in Public Safety and Government Security Award Nominations are also being accepted, such as 2019 Honored Winners which includes the DEAU.S. Marine CorpsDHS S&TFederal Protective ServiceDHS S&T NUSTLU.S. Marshals ServiceU.S. Border PatrolThe Port Authority of NY/NJ, and the NYS Division of Homeland Security & Emergency Services.

Individuals are also encouraged to be nominated for Government Excellence in Public Safety and Homeland Security such as last years widely respected recipients.

Why American Security Today?

The traditional security marketplace has long been covered by a host of publications putting forward the old school basics to what is Today – a fast changing security landscape.

The traditional security marketplace has long been covered by a host of publications putting forward the old school basics to what is Today – a fast changing security landscape.

American Security Today is uniquely focused on the broader Homeland Security & Public Safety marketplace with over 75,000 readers at the Federal, State and local levels of government as well as firms allied to government.

American Security Today brings forward a fresh compelling look and read with our customized digital publications that hold readers eyes throughout the story with cutting edge editorial that provides solutions to their challenges.

Harness the Power of the Web – with our 100% Mobile Friendly Publications

AST puts forward the Largest and Most Qualified Circulation in Government with Over 75,000 readers on the Federal, State and Local levels.
AST puts forward the Largest and Most Qualified Circulation in Government with Over 75,000 readers on the Federal, State and Local levels.

The AST Digital Publications is distributed to over 75,000 qualified government and homeland security professionals in federal, state and local levels.

‘PROTECTING OUR NATION, ONE CITY AT A TIME’

AST Reaches both Private & Public Experts, essential to meeting these new challenges.

Today’s new generation of public safety and security experts need real-time knowledge to deal with domestic and international terrorism, lone wolf attacks, unprecedented urban violence, shifts in society, culture and media bias – making it increasingly difficult for Homeland Security, Law Enforcement, First Responders, Military and Private Security Professionals to implement coordinated security measures to ensure national security and improve public safety.

American Security Today

These experts are from Government at the federal, state and local level as well as from private firms allied to government.

AST provides a full plate of topics in our AST Monthly Magazine Editions, AST Website and AST Daily News Alerts, covering 23 Vital Sectors such as Access Control, Perimeter Protection, Video Surveillance/Analytics, Airport Security, Border Security, CBRNE Detection, Border Security, Ports, Cybersecurity, Networking Security, Encryption, Law Enforcement, First Responders, Campus Security, Security Services, Corporate Facilities, and Emergency Response among others.

AST has Expanded readership into integral Critical Infrastructure audiences such as Protection of Nuclear Facilities, Water Plants & Dams, Bridges & Tunnels, and other potential targets of terrorism.

Other areas of concern include Transportation Hubs, Public Assemblies, Government Facilities, Sporting & Concert Stadiums, our Nation’s Schools & Universities, and Commercial Business Destinations – all enticing targets due to the large number of persons and resources clustered together.

To learn more about the 2019 ‘ASTORS’ Homeland Security Award Winners solutions, please go to the 2019 ‘ASTORS’ Championship Edition Fully Interactive Magazine – the Best Products of 2019 ‘A Year in Review’.

The ‘ASTORS’ Champion Edition is published annually and includes a review of the ‘ASTORS’ Award Winning products and programs, highlighting key details on many of the winning firms products and services, includes video interviews and more.

It is your Go-To source throughout the year for ‘The Best of 2019 Products and Services‘ endorsed by American Security Today, and can satisfy your agency’s and organization’s most pressing Homeland Security and Public Safety needs.

From Physical Security (Access Control, Critical Infrastructure, Perimeter Protection and Video Surveillance Cameras and Video Management Systems), to IT Security (Cybersecurity, Encryption, Data Storage, Anti-Malware and Networking Security – Just to name a few), the 2019 ‘ASTORS’ CHAMPIONS EDITION will have what you need to Detect, Delay, Respond to, and Mitgate today’s real-time threats in our constantly evolving security landscape.

It also includes featured guest editorial pieces from some of the security industry’s most respected leaders, and recognized firms in the 2019 ‘ASTORS’ Awards Program.

For information about advertising opportunities with American Security Today, please contact Michael Madsen, AST Publisher at mmadsen@americansecuritytoday.com.

AST strives to meet a 3 STAR trustworthiness rating, based on the following criteria:

  • Provides named sources
  • Reported by more than one notable outlet
  • Includes supporting video, direct statements, or photos

Subscribe to the AST Daily News Alert Here.