How technology lets you know when you're not home and whether your door is closed.
Researchers from Consumer Reports (CR) have discovered vulnerabilities in video doorbells of the Chinese company Eken Group Ltd. The company makes devices under the EKEN and Tuck brand names, and its products are sold by major retail chains, including Amazon, Walmart, Shein, Sears, and Temu.
Security flaws can allow an attacker to view video recordings from devices or take full control of them. An attacker can take advantage of the flaws to create an account in the app and gain access to the nearest intercom camera by connecting it to another device. The cybercriminal can then view the footage and even lock the doors of the device's owner.
CR found that at least 10 other identical video doorbells sold in the United States under different brand names are controlled through the same Aiwit mobile app from Eken.
All the doorbells under study use the Aiwit mobile app
Researchers purchased 2 video doorbells sold under the Fishbot and Rakeblue brands, and found that both devices are subject to the same vulnerabilities. Owners of such cameras face harassment and may be subject to surveillance via phones, online platforms, and connected devices.
Video doorbells have different packaging and plastic cases, but they are almost identical due to the location of cameras, motion sensors and doorbell buttons
Some of the analyzed intercoms also do not have a visible identifier issued by the Federal Communications Commission (FCC), which is a mandatory requirement for sale in the United States. Walmart removed the defective items from its catalog and offered refunds to its customers who purchased the devices.
CR noted that large retailers, such as Amazon, need to take more responsibility for the harm caused by the products they sell. Retail chains could do much more to better screen sellers and respond to complaints. And now it seems that the networks are risking their reputation and burdening unsuspecting consumers with low-quality products.
Researchers from Consumer Reports (CR) have discovered vulnerabilities in video doorbells of the Chinese company Eken Group Ltd. The company makes devices under the EKEN and Tuck brand names, and its products are sold by major retail chains, including Amazon, Walmart, Shein, Sears, and Temu.
Security flaws can allow an attacker to view video recordings from devices or take full control of them. An attacker can take advantage of the flaws to create an account in the app and gain access to the nearest intercom camera by connecting it to another device. The cybercriminal can then view the footage and even lock the doors of the device's owner.
CR found that at least 10 other identical video doorbells sold in the United States under different brand names are controlled through the same Aiwit mobile app from Eken.
All the doorbells under study use the Aiwit mobile app
Researchers purchased 2 video doorbells sold under the Fishbot and Rakeblue brands, and found that both devices are subject to the same vulnerabilities. Owners of such cameras face harassment and may be subject to surveillance via phones, online platforms, and connected devices.
Video doorbells have different packaging and plastic cases, but they are almost identical due to the location of cameras, motion sensors and doorbell buttons
Some of the analyzed intercoms also do not have a visible identifier issued by the Federal Communications Commission (FCC), which is a mandatory requirement for sale in the United States. Walmart removed the defective items from its catalog and offered refunds to its customers who purchased the devices.
CR noted that large retailers, such as Amazon, need to take more responsibility for the harm caused by the products they sell. Retail chains could do much more to better screen sellers and respond to complaints. And now it seems that the networks are risking their reputation and burdening unsuspecting consumers with low-quality products.
