Surveillance cameras with malware embedded at Amazon were on sale



When an engineer's man purchased an outdoor internet camera from Amazon, he noticed that the malware was embedded and reported the details on his blog.

Mike Olsen - Beware, even things on Amazon come ...
http://artfulhacker.com/post/142519805054/beware-even-things-on-amazon-come

I received a consultation from a friend saying "I want to set the surveillance camera at home"Mike OlsenBought a set of items with six surveillance cameras and equipment necessary for recording on Amazon. Olsen logged in to the management page of the Internet camera for setting, before setting it to a friend, the setting screen was an old interface, and he said that he could not even operate.

Olsen who thought that "something bad CSS is written" opened a development tool. Instead of discovering the wrong code, he seems to have found a link of an iframe with a very suspicious host name. Below is the screenshot with the host name written, the domain "brenz.pl" is written.


I looked at this domain on Google search and reported that several pages are malware. However, no one touched the camera purchased by Olsen this time.

This is the camera sales page. Olsen reports this camera to the forum, and the camera has already been returned.


Although the product sales page has already been deleted, it warns that "Do not worry because the item sold at Amazon". Although the camera of the manufacturer called Urban Security Group embedded the malware this time, it seems fortunately that it is not sold in Japanese Amazon.
http://www.amazon.com/Sony-Chip-Camera-1080P-CCTV/dp/B00YMEVSGA

in Software,   Hardware,   Security, Posted by darkhorse_log