Researchers find security flaws in ‘Amazon’s Ring Video Doorbell Pro’ IoT device
Bitdefender researchers have discovered an issue in ‘ Amazon’s Ring Video Doorbell Pro ’ IoT device that allows an attacker to intercept the owner’s Wi-Fi network credentials. During the configuration stage, the mobile app sends the Wi-Fi network credentials in plaintext to the Ring Video Doorbell Pro. This then allows the hacker to sniff the packets and find out the sensitive data it needs to connect to the user’s WiFi. Once in possession of a user’s WiFi password, an attacker has full access to the network. And it’s no secret that an internal network can be very lax. In fact, many devices such as Smart TVs allow interaction without any authentication whatsoever – even if a device was under attack, there is no trace left and users will have no idea they were even a victim. Examples of possible things an attacker might do without your knowledge: Interact with all devices within the household network Intercept network traffic and run ‘man-in-the-middle’ attacks ...