Awkward: Nest cameras speaker abused to tell victims to subscribe to Youtube channels
An attacker has been successful to login to dozens of Nest cameras, mainly due to reused passwords. Once logged in, the attacker used the speakers of the camera to demand from victims to subscribe to Youtuber PewDiePie. The attacker also asked to prove the subscribe by performing it while he watched on the cam.
Against Vice Magazine, the attacker stated he uses usernames and passwords that have been compromised in various leaks, mentions myce:
With this leaked login data the attacker then attempts to login to Nest accounts. This is sometimes possible, because some Nest owners use the same leaked login data for their Nest account, and possibly many other accounts. Once logged in, the Nest accounts provide live access to the Nest camera of the victim. The attacker claims that with this method he obtained login data for 4,000 Nest accounts. Nest users are advised to reset their password to a unique one, and to use two-factor authentication.
Senior Member
Posts: 112
Joined: 2016-11-08
I agree, ALL devices should be made to have a unique password from manufacture.
This Default Password rubbish, has to stop.
Senior Member
Posts: 592
Joined: 2002-03-22
I gotta say, sometimes I'm completely shocked at how tech-illiterate the public at large are.
Senior Member
Posts: 4796
Joined: 2008-12-09
I agree, ALL devices should be made to have a unique password from manufacture.
This Default Password rubbish, has to stop.
Right, like the ISPs just provide you with a router with a ssid/password already setup. Why is that so hard.
Senior Member
Posts: 6074
Joined: 2011-01-02
Probably cutting costs by installing same software on all devices. (no further step to change settings for each device)
Posts: 6074
Joined: 2011-01-02
This is actually wholesome. Could of been much worse.
Does the attacker access camera by its exposed public IP address port?
Anyway, shame on Nest for not assigning unique password for each device.