Author Topic: CloudPets Nightmare Part 2: Toys Can Be Hacked via Bluetooth  (Read 27 times)

0 Members and 1 Guest are viewing this topic.

Offline Quizmaster

  • Flying Nurse
  • Seasonal Competition Team
  • *
  • Posts: 23301
    • Smokey's Security Forums
  • .: Surf Queen
CloudPets Nightmare Part 2: Toys Can Be Hacked via Bluetooth
« Reply #1 on: March 01, 2017, 04:53:20 PM »
CloudPets Nightmare Part 2: Toys Can Be Hacked via Bluetooth
1 March 2017, 3:57 pm

The CloudPets nightmare seems to have no ending and, even worse, take on new shapes. After it was revealed that it leaked hundreds of thousands of user recordings and credentials, it now seems that its Bluetooth Web API is not really safe against remote exploitation. 

So what does this mean for those cute little plushies? Well, these toys allow a webpage to connect to the toy via Bluetooth without any authentication, giving it the power to control the gadget and record from the CloudPet's microphone. This feature can be used to play sounds through it.

Here comes the nightmare part: the insecure implementation of this API can permit attackers to snoop on families from outside their house. Everything they need to do is open a phone, a webpage, pair it to the nearby toy and listen in. 

Researchers from Context Information Security ... (read more)

Source: Softpedia News / Security

>> To obtain the full Softpedia Security News article, click the link in the first post line <<


Except where otherwise stated, all content, graphics, banners and images included © 2006 - 2018 Smokey Services™ -- All rights reserved
Design board graphics, banners and images by DSTM & PseFrank

This site does not store profiling-, tracking-, third-party and/or any other non-essential cookie(s) on client computers and is fully compliant with the EU ePrivacy Directive
Smokey's does not use any Web Analytics/Analysis Service, and also does not use any browser fingerprinting techniques

Smokey's also provides free fully qualified Log / Malware Analysis & Removal Help and System Health Checks