Monday, 19 August, 2019

Some DSLR cameras can be infected with ransomware

Israeli cyber experts identify serious security flaw in digital cameras Digital cameras vulnerable to ransomware, Check Point researchers find
Emmett Howard | 13 August, 2019, 05:39

Check Point notes that cameras are a great attack target because they contain valuable personal photos that folks would be willing to pay for.

Check Point chose to use the Canon EOS 80D for its tests as the device has both USB and Wi-Fi connectivity along with an active modding community that develops open source software for the camera.

PTP, which is unauthenticated in both USB and Wi-Fi modes, is particularly vulnerable to attacks by hackers who are either in close proximity (Wi-Fi) or who have already hijacked a PC (USB).

Check Point researchers set out to see if they could access the cameras and take advantage of vulnerabilities in the protocol to infect the camera.

Still, security researchers at Check Point have at least managed to play with the formula a little, and have discovered a way of making a Canon EOS 80D hold an owner's photographs to ransom, with the demand for cash displayed on the device's 3in TFT screen. Imagine you are on a holiday and have many GBs worth of photos stored on your SD card. But while this particular model was chosen for the experiment, researchers warn that any internet-connected digital camera could be vulnerable to the attacks.

The researchers say there are a few things camera owners can do to avoid being infected: make sure the camera is using the latest version issued by the firm, and install a patch if available; turn off the camera's WiFi when not in use; when using WiFi, use the camera as the WiFi access point, rather than connecting the camera to a public WiFi network.

Police in Hong Kong should exercise restraint to avoid escalating violence
Police demonstrate a water cannon equipped truck at the police tactical unit compound in Fanling, Hong Kong, China , today.

Argentinian peso crashes on surprise election outcome, USD/ARS rises more than 30%
Argentina's opposition leader Alberto Fernandez , won the primary elections on Sunday securing, 47.37% of votes. Fernandez's lead far exceeded the margin of 2-8 percentage points forecast in recent opinion polls.

Apple TV releases teaser trailer for ‘The Morning Show’
Nearly a full year later, in October 2018, Carell joined the project , which marks his first regular TV gig since The Office . Back in March, Witherspoon, Aniston, and Carell introduced their project at Apple's launch event.

"As PTP is widely used by all digital camera vendors, we do believe that similar vulnerabilities will affect other vendors as well", Itkin said. "Hackers could then hold peoples' precious photos and videos hostage until the user pays a ransom for them to be released".

Do not connect the camera to a PC or mobile device that is being used in an unsecure network, such as in a free Wi-Fi environment.

The details of the vulnerability and how it was exploited are complicated, and you can read all about it on Check Point Research's website.

Check Point disclosed the vulnerabilities to Canon, which has issued a security update for its devices.

As Canon explains, there have been no reported cases of this vulnerability actually being exploited to install ransomware IRL, but now that the info is out there, the company is working as quickly as possible to patch affected DSLRs.

Recommended

  • Death toll in Myanmar landslide climbs to 56

    Death toll in Myanmar landslide climbs to 56

    The intense monsoon rains have also forced the evacuation of almost 38,000 people across the country, according to the UN. A deluge of mud had descended on Thae Pyar Kone village in Monday state on Friday, and washed out homes and a monastery.
    Contacts on iPhones vulnerable to hack attack Report

    Contacts on iPhones vulnerable to hack attack Report

    Security researchers have revealed that the iOS Contacts app could make your iPhone or iPad vulnerable to malicious attack. They exploited the SQLite vulnerability as well as a known bug for four years to manipulate the Apple Contacts app.
    Fortnite World Champ

    Fortnite World Champ "Bugha" swatted during Sunday livestream

    Part of what makes swatting so unsafe is the potential for law enforcement to harm the swatting target or their loved ones. After Bizzle clutched up and won the game, he and Dubs were trying to figure out what happened to Bugha .
  • Rwanda: Ebola Fears Slow Crossings at Rwanda-DRC Border

    Rwanda: Ebola Fears Slow Crossings at Rwanda-DRC Border

    The Rwandan and Congolese health ministers met Tuesday to discuss measures to stop the Ebola outbreak from spreading. Right after the first case in Goma was reported, World Health Organization declared it as a "rare global emergency".
    Watch Bray Wyatt's Insane WWE Summerslam Entrance

    Watch Bray Wyatt's Insane WWE Summerslam Entrance

    All these symbols have been a true testament to the deep story-telling WWE has woven into Bray Wyatt over the past few months. As for the match itself, it served its objective in re-establishing Bray Wyatt as a big star in the WWE.
    Henry Onyekuru: Everton sell Nigeria forward to Monaco

    Henry Onyekuru: Everton sell Nigeria forward to Monaco

    But the French club stated clearly that the 54-year-old was not sacked at the club, but left on mutual agreement. He will replace Nacer Chadli at Monaco, who is leaving to join Anderlecht.
  • Ivorian Musician DJ Arafat dies in road crash

    Ivorian Musician DJ Arafat dies in road crash

    DJ Arafat holds the award for best artist of the year during the Coupe-Decale Awards in Abidjan October 2, 2017. Over 1,000 fans of his work swarmed the hospital after the news broke, chanting the words "Arafat can not die".
    Bodies Found in Manitoba Confirmed to be Wanted Murder Suspects

    Bodies Found in Manitoba Confirmed to be Wanted Murder Suspects

    Four days later on another BC highway, the Royal Canadian Mounted Police allege the teenagers murdered botanist Leonard Dyck. They were also wanted in the murder of a young tourist couple - Australian Lucas Fowler and American Chynna Deese.
    England Boss Eddie Jones Launches Scathing Attack On World Rugby

    England Boss Eddie Jones Launches Scathing Attack On World Rugby

    Billy Vunipola, Joe Cokanasiga and Luke Cowan-Dickie all crossed over for England in the first half as they led 21-7 at the break. We need to get some consistency into that area of the game.
  • Missy Elliott Receives Video Vanguard Award At The 2019 MTV VMAs

    Missy Elliott Receives Video Vanguard Award At The 2019 MTV VMAs

    In addition to bringing home a new trophy, the "Get Ur Freak On" rapper will also take the stage at the annual show for the first time since 2006.
    Manchester City Defeat Won't Define Our Season, Says West Ham Star

    Manchester City Defeat Won't Define Our Season, Says West Ham Star

    The one damning verdict of West Ham's defeat was the roar the fans gave as if they had scored a goal. It is going to change the dynamic - not just for the team but also for the spectators.
    DOJ: Friend of Dayton shooter to face federal charges

    DOJ: Friend of Dayton shooter to face federal charges

    Chillingly, DailyMail.com can reveal, that Beard and Megan Betts were both 'among the first victims, ' according to police. People congregate around a memorial to those killed in Sunday morning's mass shooting on August 6, 2019 in Dayton, Ohio.

Serena Williams breaks down in tears after withdrawing from Rogers Cup final Serena Williams breaks down in tears after withdrawing from Rogers Cup final As Williams sat dejected in her chair, Andreescu , who is no stranger to injury setbacks, went over to console her. Serena Williams was overcome with emotion after an injury forced her to withdraw from 2019 Rogers Cup Finals.

Severe storms expected in Midwest, Northeast as South heats up Severe storms expected in Midwest, Northeast as South heats up Scattered storms will move across the foothills, Front Range and eastern Plains in the afternoon and evening. Another high pressure system is expected to follow the rain producing comfortable midweek weather.

Celtics Schedule: NBA Reveals Boston’s Slate For 2019-20 Regular Season Celtics Schedule: NBA Reveals Boston’s Slate For 2019-20 Regular Season It will also be the first time in franchise history that the Celtics will play outside of the US on Christmas Day. The Celtics will open on the road in Philadelphia on Wednesday, October 23, at 7:30 p.m.

Fire at 24-hour day care kills four siblings and owner's child Fire at 24-hour day care kills four siblings and owner's child The children haven't been formally identified, but the Erie Fire Department says the dead range in age from 8 months to 7 years. Still, the day care received a full fire inspection on December 28, 2018, and was found to be in compliance.

US attorney: Epstein abuse probe steadfast despite his death US  attorney: Epstein abuse probe steadfast despite his death But without the results from the post mortem examination, questions still loom regarding the precise cause of Epstein's death. The staff at the facility also failed to follow protocols on the day of Epstein's August 10 death, while in custody.

Varun Dhawan steps into Govinda’s shoes in Coolie No. 1: See posters Varun Dhawan steps into Govinda’s shoes in Coolie No. 1: See posters Mumbai: The adaptation of the cult comedy film Coolie No 1 has been in the news ever since the film got announced. Not just her debut film Kedarnath , but her second film Simmba also released in the same month of December.

All Flights Cancelled Out Of Hong Kong Airport Amid Democracy Protests All Flights Cancelled Out Of Hong Kong Airport Amid Democracy Protests The flight cancelations left many visitors stranded in the airport, surrounded by scores of protesters. Police stormed a number of underground train stations, firing tear gas and arresting protesters.

Samsung insists the Galaxy Home speaker is coming soon Samsung insists the Galaxy Home speaker is coming soon So, the Note 10 doesn't have a headphone jack, can't have its storage expanded, and has a lower-resolution display. What this means is that images, videos and text will be a lot clearer on Note 9 as compared with the Note 10.

No-Deal Brexit Could Deepen Europe's Shortage of Medicines No-Deal Brexit Could Deepen Europe's Shortage of Medicines The US president branded Johnson as Britain's Trump and said the sides were on the verge of making a breakthrough in ties. This month, Britain joined the United States in a maritime security mission in the Gulf to protect merchant vessels.

India want Davis Cup tie moved from Pakistan amid rising tensions India want Davis Cup tie moved from Pakistan amid rising tensions Pakistan has downgraded diplomatic ties with India amid a lockdown in India-administered Kashmir and stopped a cross-border train. If the tie takes place as per the schedule, India will travel to Pakistan to compete in a Davis Cup fixture after 55 years.

Chelsea boss Frank Lampard frustrated after heavy loss at Manchester United Chelsea boss Frank Lampard frustrated after heavy loss at Manchester United Manchester United were in need of a fast start to the campaign to erase memories of a awful end to last season and got it. He entered the fray as a second-half substitute with United scoring just seven minutes after he came on.

President Trump rule to change enforcement of Endangered Species Act President Trump rule to change enforcement of Endangered Species Act The law is credited with saving several unique species native to the United States, including the bald eagle. Officials said those considerations would not affect listing decisions. "It was a tough pill to swallow".

Redmi's General Manager Confirms That The Redmi Note 8 Is Coming Soon Redmi's General Manager Confirms That The Redmi Note 8 Is Coming Soon However the company didn't clarify whether this 100MP smartphone will have Samsung ISOCELL sensors. The race of " Excellent Camera with good smartphone feature " is on now.

Game Preview: Washington Nationals at New York Mets Game Preview: Washington Nationals at New York Mets Alonso's toss should've hit deGrom in the chest and ended the threat, except the pitcher appeared to hesitate short of the bag. NY was losing 3-0 in the fourth inning Friday when Alonso (two-run homer) and Davis hit back-to-back homers to tie the game.

Tesla Model 3 hits parked truck and catches fire Tesla Model 3 hits parked truck and catches fire Vehicle batteries can catch fire after a very hard impact, albeit Tesla fires are rare according to the company's own statistics. A Tesla Inc Model 3 electric automobile recharges at a charging station beside a canal in Amsterdam, Netherlands.