A group of hackers have access to 150 miles of security cameras: spying on Tesla and other companies, hospitals and prisons

A group of hackers dice haber obtenido a valid amount of security data recovered from the startup of Silicon Valley Verkada Inc., logrando acceder a las Live transmissions of 150,000 emergency rooms inside hospitals, companies, police departments, prisons and schools.

The companies that make up the vehicles are included, including the car manufacturer. Tesla Inc. y the proof software Cloudflare Inc.. Además, the hackers can see videos from the interior of health clinics for women, psychiatric hospitals and Verkada offices. Bed and breakfast accommodation, including in hospitals, used gesig recognition technology to identify and categorize the captured characters in the images. The hackers aseguran also have access to complete archive of video of all Verkada customers.

And a video posted to por Bloomberg, a workplace for the dental hospital at Halifax Health in Florida, the largest part of the hospital hospital staff also approaching a man and moving towards a bed. Halifax Health appears in the Verkada public web site in a case study titled: “How to Get a Florida Medical Attention Provider Updated and Implementing a HIPAA Compatible Security System”.

Filtration of data was followed by a hackers international collective and has the intention to show the omnipresence of video vigilance and facility with which you can access these systems, dijo Tillie Kottmann, there is an innocent hackers who help them promote the vulnerability of the so-called Verkada in San Mateo, California.

Kottmann, que usa pronombres no binarios, previously it was attributed to the credit for accessing the chip manufacturer Intel Corp. y manufacture of cars Nissan Motor Co.. Argument that his reasons for seerower son “A lot of curiosity, laughter at the freedom of information and against intellectual property, a large dose of anti-capitalism, a pizzeria of anarchism, and also because it is a fun pastime to do nothing”.

“We will deactivate all the accounts of the internal administrator to avoid any access without authorization”, you are a representative of Verkada in a communication. “Our internal security team and the external security company are investigating the scale and severity of this potential problem”.

A person with knowledge of the day that Verkada Information Security Director, an internal team and an external security company are investigating the incident. The company is working for notify customers and establish a support line to respond to questions, says the person, who solicited the anonymity by conducting a course investigation.

Representatives of Tesla, Cloudflare and other companies identified in this story did not respond immediately to the requests for comment. Representatives of the prisons, hospitals and schools mentioned in this article will not comment or do not respond immediately to the requests for comments.

In a video where Bloomberg shows access to officers at a police station in Stoughton, Massachusetts, interrogation of a homeless man. The hackers aseguran haber obtenido también access to the security cameras of the primary school Sandy Hook by Newtown, Connecticut, donated in 2012,’ma armado killed up to 20 people.

The 330 security guards inside the Madison Conditional Circle in Huntsville, Alabama are also available for hackers. Verkada offers a function called “Analysis of people”, which allows a customer “Search and filter images according to many different attributes, including gender, gender, color and including a person’s roster”, is a public publication of the Verkada blog. The images shown by Bloomberg show that the rooms inside the cell, some of the rooms are windows for ventilation, thermostats and defibrillators, rastrean to the findings and to the personal penitentiary using the facial recognition technology. The hackers indicate that the powder can access Live broadcasts and videos archived, in some cases including the audio of interviews between police officers and suspects of crimes, all in high definition resolution known as 4K.

Kottmann says that his group is obtuvo “admin” access to the rooms, which means that you can use the rooms to execute your own code. This access can, in some cases, be allowed to enter the corporate network of Verkada’s clients, well, secure the rooms and users as a platform to launch future attacks.

Obtaining this degree of access to the chamber does not require an additional procedure, and it involves a incorporated function, said Kottmann.

The methods of los hackers no fueron sophisticated: obtuvieron access to Verkada through a account of “super administrator”, which allows them to mirror the cameras of all their customers. Kottmann signaled that the number of the user and the counter to an administrator account to find publicly available items on the internet. After Bloomberg was contacted by Verkada, the hackers lost access to video sources and archives, said Kottmann.

Verkada, founded in 2016, sells security cameras in which the clients can join and administrator and travel the internet. In the year 2020, recaudó 80 million US dollars in venture capital funds, valoranda to the company in US $ 1,600 million. Between the inversionists is found Sequoia Capital, one of the oldest companies in Silicon Valley.

Kottmann says that during the logarithm operation af te laai the complete list of miles of customers of Verkada, as well as the general balance of business, which enumerates assets and liabilities. As a closed capital company, Verkada does not publish its financial statements. Kottman says the hackers included to observe the workings of a Verkada employee who has installed one of the rooms inside his house. One of the clips guarded by the employee completing a breakout with his family.

“If you have a company that has bought this camera and it is located in sensitive places, it is possible that it does not have the expectation that, in addition to being monitored by the security team, there is no administrator in the company that also is observing“, Dijo Eva Galperin, director of cyber security of the Electronic Frontier Foundation (EFF, por sus siglas en inglés), a foreign Bloomberg informo about infiltration.

Security cameras and facial recognition technology are used within the scope of corporate offices and factories to protect and protect patent information within an internal facility, said EFF Galperin.

“There are many legitimate reasons to be vigilant within a company, Galperin said. “The most important part is having the informed consent of its employees. For the most part, it’s done within the employee manual, which cases nadie lee ”.

(With Bloomberg info)

SEGUIR LEYENDO: