A group of hackers claim to have hacked into Ring, an Amazon-owned company that specializes in surveillance cameras. He is now threatening to publish the stolen data.
Called ALPHV, the group of cybercriminals specializes in ransomware and operates malware called BlackCat. He has a website where he publishes the names of his victims in an attempt to extort them. If they do not pay, the group then threatens to make the stolen data public.
Ring remains vague
ALPHV applies the same process with Ring. He claims to have penetrated the company’s database and threatens to leak the data on its website. For its part, the subsidiary of Amazon affirms “ have no indication that Ring has been the victim of ransomware “, but nevertheless confirms to be aware that one of its third-party suppliers has indeed been targeted by an attack. She adds that he does not have access to his clients’ files.
ALPHV’s site is distinguished by the fact that its section where the hacked data is published is easier to search than the platforms of other cybercriminal groups.
Note, however, that Ring devices support end-to-end encryption, but this must be enabled. When this is the case, neither Amazon, nor law enforcement, nor hackers can access the downloaded footage. On the other hand, it is possible that in this case, the cybercriminals have exfiltrated company or customer data rather than videos.
Not the first time Ring has been targeted by a cyberattack
If the attack is confirmed, it would not be the first time that Ring has had to deal with a security breach. As reminded Vicein 2019, hackers on a Discord channel began hacking into a series of Ring cameras across the United States by reusing credentials exposed in previous hacks, terrorizing their victims.
In the state of Tennessee, for example, a hacker hacked the camera located in a little girl’s room. He then spied on her and communicated with her. These types of incidents demonstrate that cloud-connected surveillance cameras are far from infallible.
Sources: Forbes, Vice
0