The hackers say they were able to peer into multiple locations of the luxury gym chain Equinox. After Bloomberg contacted Verkada, the hackers lost access to the video feeds and archives, Kottmann said. Kottmann says they found a user name and password for an administrator account publicly exposed on the internet. The hackers' methods were unsophisticated: they gained access to Verkada through a “Super Admin” account, allowing them to peer into the cameras of all of its customers. Obtaining this degree of access to the camera didn't require any additional hacking, as it was a built-in feature, Kottmann said. That access could, in some instances, allow them to pivot and obtain access to the broader corporate network of Verkada's customers, or hijack the cameras and use them as a platform to launch future hacks. Kottmann said their group was able to obtain “root” access on the cameras, meaning they could use the cameras to execute their own code. The hackers say they were able to access live feeds and archived video, in some cases including audio, of interviews between police officers and criminal suspects, all in the high-definition resolution known as 4K. Images seen by Bloomberg show that the cameras inside the jail, some of which are hidden inside vents, thermostats and defibrillators, track inmates and correctional staff using the facial-recognition technology. Verkada offers a feature called “People Analytics,” which lets a customer “search and filter based on many different attributes, including gender traits, clothing color, and even a person's face,” according to a Verkada blog post. The hackers say they also gained access to the security cameras of Sandy Hook Elementary School in Newtown, Connecticut, where a gunman killed more than 20 people in 2012.Īlso available to the hackers were 330 security cameras inside the Madison County Jail in Huntsville, Alabama. Representatives of the jails, hospitals and schools named in this article either declined to comment or didn't immediately respond to requests for comment.Ī video seen by Bloomberg shows officers in a police station in Stoughton, Massachusetts, questioning a man in handcuffs. Representatives of Tesla and other companies identified in this story didn't immediately respond to requests for comment. ![]() “The cameras were located in a handful of offices that have been officially closed for several months.” The company said it disabled the cameras and disconnected them from office networks. “This afternoon we were alerted that the Verkada security camera system that monitors main entry points and main thoroughfares in a handful of Cloudflare offices may have been compromised,” San Francisco-based Cloudflare said in a statement. The company is working to notify customers and set up a support line to address questions, said the person, who requested anonymity to discuss an ongoing investigation. “Our internal security team and external security firm are investigating the scale and scope of this issue, and we have notified law enforcement.”Ī person with knowledge of the matter said Verkada's chief information security officer, an internal team and an external security firm are investigating the incident. “We have disabled all internal administrator accounts to prevent any unauthorized access,” a Verkada spokesperson said in a statement. Kottmann said their reasons for hacking are “lots of curiosity, fighting for freedom of information and against intellectual property, a huge dose of anti-capitalism, a hint of anarchism - and it's also just too much fun not to do it.” Kottmann, who uses they/them pronouns, previously claimed credit for hacking chipmaker Intel Corp. The data breach was carried out by an international hacker collective and intended to show the pervasiveness of video surveillance and the ease with which systems could be broken into, said Tillie Kottmann, one of the hackers who claimed credit for breaching San Mateo, California-based Verkada. ![]() ![]() The hackers said they obtained access to 222 cameras in Tesla factories and warehouses. Another video, shot inside a Tesla warehouse in Shanghai, shows workers on an assembly line.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |