SIAP: Five Million IP Cameras Cyber-Attacks Blocked in Just Five Months

CCTVCam

Known around here
Joined
Sep 25, 2017
Messages
2,660
Reaction score
3,480
How are brute force logins even possible these days? To not have you locked out after X attempts for X period is very lax these days. Many forum boards do it but cameras remain open? Yeah it can be a pain on forums with a forgotten pw, but with a camera there' always the physical reset button.
 

alastairstevenson

Staff member
Joined
Oct 28, 2014
Messages
15,930
Reaction score
6,778
Location
Scotland
To be honest - the article is just a short puff-piece for Trend Micro, and doesn't contribute anything of note.

The security vendor analyzed 7000 anonymously aggregated IP cameras, and discovered that the IP surveillance industry is facing high numbers of attacks.
I think many others already knew that quite a few years back ...

How are brute force logins even possible these days?
The simple answer - they are not. Even on the least sophisticated of firmware.
Vulnerabilities and backdoors and hard-coded credentials are the way in.
 

mat200

IPCT Contributor
Joined
Jan 17, 2017
Messages
13,667
Reaction score
22,771
..
If your cameras have wifi access or have access to the internet, you get hit for being a dumb ass.
Judging by responses on another forum.. there's a LOT of port forwarding / P2P / UPnP going on. Most consumers just don't care - they will just plug it in an hope it works. That's all that matters to them, until...
 

CCTVCam

Known around here
Joined
Sep 25, 2017
Messages
2,660
Reaction score
3,480
Don't care or don't know? Lets face it how many average consumers know how to network?

A large number need to pay shops such as PC World for an installation service to take it out of the box, plug the power cable into the mains, plug the monitor into the pc, press the on switch, then follow the guided instructions to start it! 2 plugs and a button and they can't manage it.

In such a world, do you really expect these same people to network a camera? I guess most google camera networking or see it in a manual on the home cameras, and out of the option see Port Forwarding as the easy option then go for it without any knowledge or care of the consequences. Even where they are aware of the threat, most are probably looking for ease as they don't understand VPN, and think no hacker will be interested in them, so take the risk as they simply want to get it set up and working.
 
Top