Extortion programs on smart TV? You can prepare, they go
Many information security experts called cryptographers as the biggest threat in 2016. In this case, the problem concerns not only personal computers or smartphones. Even smart TVs are in danger. The other day, Symantec has demonstrated how easily ransomware can penetrate smart TV, and how difficult it is to get rid of this software.
A company representative who was studying this problem did not name the model and the TV manufacturer, for obvious reasons. But he said that a modified version of Google Android, which is often used by TV manufacturers, is used as a software shell on this TV.
In order to infect an innocent TV, an employee of Symantec named Candid Wueest used a simple cryptographer. This software, after installation on TV, began to show a message about the need to send a certain amount of money every few seconds, overlapping the image on TV.
The problem is aggravated by the fact that most representatives of the ransomware type work on TV with Android OS. The problem is the lack of SSL encryption between the TV and remote servers that are used to install the software or update the firmware.
')
Using the usual MitM (Man-in-the-Middle) attack, the researcher was able to place malicious software on his own device, replacing the gaming application. Malicious software soon got root-rights, blocking the device.
Having established a cryptographer, the researcher began to study ways in which the malware can be removed. The results of his work in this direction were unsuccessful, it was almost impossible to use the TV, plus the malware did not allow the TV to reset to factory settings, contact support or perform other operations.
The only way to remove ransomware was ADB (Android Debug Bridge), activated by an expert in advance. This tool allowed him to connect the TV to the laptop, and remove the malware from there.
Symantec warns that apart from ransomware, smart TVs are vulnerable to other types of threats. Attackers can hack into a TV to perform clipping, mining cryptocurrency, stealing user personal data, or even using a TV as an element of a botnet.
To prevent smart TV from becoming infected with malware, you should use some precautions:
A company representative who was studying this problem did not name the model and the TV manufacturer, for obvious reasons. But he said that a modified version of Google Android, which is often used by TV manufacturers, is used as a software shell on this TV.
In order to infect an innocent TV, an employee of Symantec named Candid Wueest used a simple cryptographer. This software, after installation on TV, began to show a message about the need to send a certain amount of money every few seconds, overlapping the image on TV.
Most ransomware works on Android TV.
The problem is aggravated by the fact that most representatives of the ransomware type work on TV with Android OS. The problem is the lack of SSL encryption between the TV and remote servers that are used to install the software or update the firmware.
')
Using the usual MitM (Man-in-the-Middle) attack, the researcher was able to place malicious software on his own device, replacing the gaming application. Malicious software soon got root-rights, blocking the device.
Having established a cryptographer, the researcher began to study ways in which the malware can be removed. The results of his work in this direction were unsuccessful, it was almost impossible to use the TV, plus the malware did not allow the TV to reset to factory settings, contact support or perform other operations.
The only way to remove ransomware was ADB (Android Debug Bridge), activated by an expert in advance. This tool allowed him to connect the TV to the laptop, and remove the malware from there.
Other types of attacks are also possible on Smart TV.
Symantec warns that apart from ransomware, smart TVs are vulnerable to other types of threats. Attackers can hack into a TV to perform clipping, mining cryptocurrency, stealing user personal data, or even using a TV as an element of a botnet.
To prevent smart TV from becoming infected with malware, you should use some precautions:
- Understand what personal data and where the TV transmits during setup;
- Be careful to install applications from an unverified source;
- Enable application verification, if possible;
- Block functions that are not used (camera or microphone);
- Remove or time off the ability to remotely access the TV;
- Use encryption not lower than WPA2;
- Use wired connections instead of wireless connections, if possible;
- Configure the device separately from the home network;
- Install updates in time, activate automatic updates.
PS Today we, like many others, have “Black Friday” and, accordingly, big discounts on servers .
Source: https://habr.com/ru/post/271831/
All Articles