₦airaland Forum

While crime rate is in geometric increase, many people are resorting to purchase of CCTV Security Systems to monitor their treasured properties and loved ones. Unfortunately quite a number of individuals purchase CCTV Cameras from their popular stores like Amazon; in which many bad individuals (HACKERS) sale some security systems that come with pre-installed Malware software in order to use it to perform their nefarious activities.

Be very careful while buying any off-brand (brands whose manufacturers are not known) electronics from Amazon, as they could end up infecting your home.

Recently, independent security researcher Mike Olsen discovered that the CCTV surveillance devices sold on Amazon came with Pre-Installed Malware.

Olsen discovered this nasty secret after he bought a set of Outdoor CCTV Surveillance Cameras from Amazon for one of his friends.

He picked Sony Chip HD 6 Camera 1080P PoE IP CCTV surveillance camera kit sold by the Urban Security Group (USG) on Amazon, as it had good reviews and was a relatively cheap set of 6 cameras with all necessary equipment included (as the saying “Cheap Products may Cost Dearly”).

In the process of setting up the cameras for his friend, Olsen logged into the administrator panel to configure the surveillance system and found that the page hosted “no normal controls or settings.” Weird!, right?

Assuming that it might be bad programming, Olsen opened up the browser’s developer tools and was surprised to discover a hidden iFrame loaded at the bottom of the body tag, retrieving content from Brenz.pl.

Surveillance Camera Comes Pre-Installed with Malware

Malware-CCTV-Cameras

A quick Google search revealed that the Brenz.pl domain was used in malware distribution campaigns, according to a blog post by cyber-security vendor Sucuri in 2011.

In short, this means that the newly bought surveillance camera kit could be infected with malware anytime, when the Brenz.pl operator decides to push malicious code to the DVR’s backend through the hidden iFrame.

Once the CCTV camera’s operator accessed that page, the malware would be downloaded and installed, potentially leading to unlawful spying and data theft.

Since the Breza.pl domain was already on the firmware, there might be other nasty malware included in the firmware as well, that does not provide the camera’s owner to access the backend.

The malware distributed by the surveillance cameras can have the ability to hijack video feeds or make the customer’s cameras part of a DDoS Botnet, something that happened last year (Certified Ethical Hackers will tell you better).

Therefore, be careful what you buy. Check reviews of every product before buying, even if the product brand and the eCommerce platform is trusted

Source: http://digitalgurushop.com/blog/buyers-be-warned-cctv-cameras-sold-on-amazon-come-with-malware/

OK so what was the solution in thy long run

Good info op

gbodimowo:
OK so what was the solution in thy long run

You look before you leap. To be forewarned is to be forearmed.