Obi a Ɔnam Wo Baby Monitor anaa Smart Security Camera So Rekasa: Wobɛto mu Ntɛm ara na Wobɛtew Netɛw So¶

Sɛ wote sɛ ɔhɔho bi nne rekasa denam wo ba Wi-Fi baby monitor so (Nanit, . Owlet, . Eufy, . VTech, . Lollipop, . Motorola), a ɔrehwɛ dan bi mu Ring, . Wyze, . Arlo, . Blink, . Google Nest, anaa TP-Link Tapo camera motorized pan-and-tilt lens swivel fa wo mpa so wɔ n’ankasa so, hu camera no blue/red status LED hyerɛn wɔ 2:00 AM, anaasɛ wuhu wo Ecobee / . Nest smart thermostat a wɔde krank ayɛ no digrii Celsius 32 (digrii Fahrenheit 90) yɛ wo fie ntua a ɛyɛ hu. Nanso, gye sɛ ɔhɔho bi wɔ honam fam wɔ wo apon akyi, ɛkame ayɛ sɛ eyi yɛ akyirikyiri cloud-account anaa router port-forwarding intrusion bere nyinaa sen sɛ obi begyina wo mfɛnsere akyi. Bɛboro ɔha biara mu nkyem 90 a wɔfa akwan abien so nne mfoninitwa mfiri a wɔkyere no kɔ so wɔ akwan abien no mu biako so: (1) Automated Credential Stuffing (beae a kɔmputa so nsɛmmɔnedifo fa email dedaw ne password a wosan de dii dwuma wɔ aguadidan bi a wɔabu so so na wɔde kɔ bot bi a ɛkɔ wo mu Ring, . Wyze, . Nest, anaa baby monitor cloud app fi kilomita mpempem pii akyirikyiri), anaa (2) Direct Local IP / UPnP Port Forwarding Exposure (beae a generic IP camera anaa network video recorder a wɔansiesie NVR a wɔde di dwuma UPnP sɛ wobebue hyɛn gyinabea 554 RTSP, . 80, anaa 8000 tẽẽ kɔɔ ɔmanfo intanɛt so na wɔde index yɛɛ no Shodan.io afiri a wɔde hwehwɛ nneɛma mu). Sɛ wopɛ ofie router hardening a ɛtrɛw a, hwehwɛ nso ofie router ne IoT mfiri ahorow a wɔbɛbɔ ho ban; sɛ wususuw sɛ obi a na anka ɔyɛ ɔhokafo anaa ofie ayayadefo na ɔhwɛ wo fie nyinaa apon ne akanea so a, hwɛ smart home hack, mfoninitwa afiri a wɔkyere, ne stalkerware; anaasɛ sɛ wɔbɔɔ wo NAS storage device no wɔ wo cameras no nkyɛn a, hwɛ ofie anaa ɔfese ketewa NAS ne UPnP a wɔatoto mu a wɔagyae mu. Sɛ wote honam fam anammɔn, wuhu obi wɔ w’agyapade so, anaasɛ wusuro sɛ w’abusua no benya honam fam ahobammɔ ntɛm ara a, frɛ wo mpɔtam hɔ nɔma a egye ntɛmpɛ (911 wɔ United States ne Canada no, . 112 wɔ Europa Aman Nkabom no nyinaa mu, . 999 wɔ United Kingdom) ntɛm ara anaa hwɛ yɛn wiase nyinaa kyerɛwtohɔ a ɛfa nɔma ahorow a egye ntɛmpɛ.

Yɛ eyi mprempren¶

1. Honam fam yi anyinam ahoɔden nhama no fi akokoaa monitor anaa dan mu mfoninitwa afiri no akyi (na twe emu backup battery biara) wɔ sikani 5 mu:
2. Mma **nsɛe bere mfa bue telefon app no na woadan camera no "Off" wɔ software mu - attacker a ɔwɔ administrative control wɔ cloud account no so betumi toggle software "Privacy Mode" asan akɔ so wɔ sekan 1 mu, na cameras binom a wɔasɛe no kɔ so streaming audio mpo bere mpo a app no kyerɛ sɛ video feed no agyae. Twe honam fam ɔfasu plug anaa USB-C anyinam ahoɔden nhama no fi mfoninitwa afiri no mu ntɛm ara.
3. Hwɛ Wi-Fi mfoninitwa afiri foforo biara a ɛwɔ dan mu wɔ wo mpa, mmofra dan, ne mmeae a wɔtra mu na yi fi mu nso. (Gyae abɔnten kar kwan/ɔpon ano dɔn mfoninitwa mfiri a wɔde ahyɛ mu nko bere a woahwɛ sɛ ebia obi wɔ wo fie akyi honam fam anaa.)
4. MMƆ hardware "Factory Reset" pinhole button a ɛwɔ camera no so anaasɛ nsan nhyɛ wo Wi-Fi router no bio:
5. Sɛ wobɔ Factory Reset wɔ camera no so anaasɛ wuyi wo fie Wi-Fi router no fi plug mu a ɛpopa RAM logs a ɛyɛ basaa no (DHCP leases, . UPnP port mappings, . NAT connection tables, ne nnansa yi cloud event clips) a ɛkyerɛ ɔtowhyɛfo no IP address, login timestamp, ne sɛ ebia ɔtowhyɛfo no nam wo cloud akontaabu so anaa wo mpɔtam hɔ Wi-Fi network so hyɛn mu.
6. Bue wo mfoninitwa afiri no mobile app (Ring, . Wyze, . Nanit, . Eufy, . Arlo, . Nest / Google Home) na fa screenshots a ɛkyerɛ "Authorized / Logged-In Devices" ne "Shared Users" ANSA na woatwa mu:
7. Hwɛ ase Account Settings -> Authorized Client Devices / . Login Activity / . Shared Users. Screenshot mfiri biara mfonini (iPhone 15, . Web Browser - Chrome on Windows, . Android Emulator), beae, ne bere nsɔano a wode bɛyɛ wo polisifo amanneɛbɔ.
8. Ntɛm ara pia Yi / Fi Mfiri Nyinaa Mu, yi Shared / Guest Users biara a wunnim, sesa wo akontaabu asɛmfua no kɔ asɛmfua soronko a ɛyɛ nkyerɛwde 16+ foforo koraa, na dane Two-Factor Authentication (2FA) de Authenticator App di dwuma (sɛ wɔboa app bi a, nnyɛ SMS anaa email da).
9. Hwɛ sɛ wo ba no monitor yɛ radio monitor a ɛnyɛ Wi-Fi ankasa (FHSS 2.4 GHz anaa DECT 900 MHz) ne Wi-Fi Mununkum Monitor:
10. Nsonsonoe a ɛho hia honam fam-ahobammɔ: Sɛ wo ba no monitor nni wi-Fi biara nni hɔ na smartphone app biara nni hɔ (awofo screen a wɔde nsa ayɛ a wɔatu ho ama ne mfoninitwa afiri a wɔde di dwuma ara kwa 2.4 GHz FHSS anaa analog radio), wontumi nkɔ hack wɔ intanɛt so. Ɛnne bi a ɛnam radio monitor a ɛnyɛ Wi-Fi so reba no firi wo fie mita 90 kɔsi 300 (anammɔn 300 kɔsi 1,000) mu ba - sɛ ɛyɛ akwanhyia mu cross-talk a ɛfiri ofipamfo akokoaa monitor/walkie-talkie a ɛwɔ frequency channel korɔ no ara so, anaa obi a ɔde radio transmitter asi abɔnten. Sɛ ɛnne no kasa kyerɛɛ wo ba no tẽẽ wɔ radio monitor a ɛnyɛ Wi-Fi so a, to w’apon mu na frɛ polisifo a wɔhwɛ ntɛmpɛ so (911 / . 999 / . 112) ntɛm ara.
11. Kɔ wo Fie Wi-Fi Router no mu (192.168.1.1 anaasɛ 192.168.0.1) na dane OFF UPnP (Universal Plug and Play) na popa biribiara a wonnim Port Forwarding mmara:
12. P2P mfoninitwa mfiri a ne bo nyɛ den anaasɛ wɔakyerɛw so fitaa (VStarcam, . Foscam, . Tenvis, . Hikvision, . Dahua, . CamHi) de di dwuma UPnP sɛ wobɛbɔ hyɛn gyinabea ahorow a wɔabue mu komm ( .554, . 80, . 8000, . 37777) wɔ wo router firewall so sɛnea ɛbɛyɛ a obiara a ɔwɔ Shodan.io betumi afa mfoninitwa afiri no so ahwɛ na woakasa a wunhia wo Wi-Fi password mpo.
13. Fa mfoninitwa mfiri, nkokoaa monitor, smart thermostats, ne smart speakers nyinaa fi wo fie Wi-Fi titiriw no so na kɔ baabi a atew ne ho Guest Wi-Fi Network (anaasɛ wɔahyira so IoT VLAN ne Client Isolation wɔama ayɛ adwuma):
14. Sɛ mpo smart plug, robɔt vacuum, anaa baby monitor hyia cloud vulnerability daakye a, sɛ wotew ne ho fi Guest Wi-Fi VLAN so a, ɛmma mfiri a asɛe no ntumi nhwehwɛ anaa ntow nhyɛ w’adwuma laptop, fon, anaa fie NAS drive so.

--- .

Gyinaesi dua: mmuae a wɔde ma ntɛm ara bere a ɔhɔho bi kasa fa ofie mfoninitwa afiri mu anaasɛ ɔde tu no¶

Di gyinaesi dua yi akyi wɔ simma 2 a edi kan wɔ asɛm no akyi na hwɛ honam fam ahobammɔ, kora adanse so, na tow nea ɔhyɛn mu no mu:

flowchart TD
    Start["Ɔhɔho Nne a Wɔte Fa Baby Monitor / Smart Camera, anaa Camera Lens a Ɛtu N’ankasa"] --> UnplugNow["ANAMMƆN 1 (Sekan 0 kosi 5): Yi Tumi Nhama (na Yi Batere) Fi Kamera no Mu Ntɛm ara"]

    UnplugNow --> MonitorType{"So Saa Monitor Yi Kɔ Wi-Fi / Smartphone App So, Anaasɛ Ɛyɛ Local Radio Monitor a Wɔahyira So (Wi-Fi nni hɔ)?"}

    MonitorType -->|"Wi-Fi biara nni hɔ / App biara nni hɔ (2.4 GHz FHSS anaa Analog Ɔwofo Screen a wɔahyira so)"| RadioAlert["KƆKƆBƆ A ƐBƐN HO: Nsɛnkyerɛnne no Fi ase Wɔ Mita 90 kosi 300 (Anamɔn 300 kosi 1,000) mu Fi Wo Fie"]
    RadioAlert --> TalkDirect{"So Ɛnne no Kasa kyerɛɛ Wo Pia/Ba no Tẽẽ, Anaasɛ Ɛte sɛ Random Neighbor/CB Cross-Talk?"}
    TalkDirect -->|"Ɔkasae Tẽẽ / Ɔkasae"| CallPoliceNow["To Doors & Windows Ntɛm ara na Frɛ 911 / 999 / 112 ma Exterior Police Patrol Check"]
    TalkDirect -->|"Ofipamfo Tiatiaa / Walkie-Talkie Cross-Talk"| RePairChannel["San Pair Ɔwofoɔ Unit & Camera na Dane FHSS Hopping Aba anaa Dan kɔ DECT 6.0Encrypted Monitor"]

    MonitorType -->|"Wi-Fi / Mununkum App Kamera (Ring, Wyze, Nanit, Eufy, Berebuw, Arlo, Generic RTSP)"| CloudVsLocal{"Ɔkwan Bɛn so na Nea Ɔhyɛn Mu no Duaa Kamera no?"}

    CloudVsLocal -->|"Vector A: Mununkum Akontaabu Adansedi Nsɛm a Wɔde Hyehyɛ (90% wɔ Ring / Wyze / Nest / Nanit Nsɛm)"| CloudLockdown["1. Screenshot Authorized Devices & Event History wɔ App mu -> 2. Twa Nhyiam Nyinaa mu -> 3. Reset Password + Ma Authenticator 2FA nyɛ adwuma"]

    CloudVsLocal -->|"Vector B: UPnP / Hyɛn Gyinabea Anim / Shodan Tẽẽ IP Asuten (Generic ONVIF / RTSP / Foscam / Hikvision)"| RouterLockdown["1. Screenshot Router UPnP & Port Forward Table -> 2. Ma UPnP & Popa Port Forwards no nyɛ adwuma -> 3. Siw Camera WAN Access ano wɔ Firewall mu"]

    CloudVsLocal -->|"Vector C: Ex-Partner / Kan Ofiehɔho / Ofie Akontaabu a Wɔkyɛ"| SharedLockdown["1. Audit 'Shared Users / Household Members' wɔ App -> 2. Sesa Wi-Fi SSID & WPA2/WPA3 Password -> 3. Factory Reset & Re-Bind Camera kɔ Akontaabu Foforo mu"]

    CloudLockdown --> VLANIsolate["Anamɔn a Etwa To: Yɛ Isolated Guest / IoT Wi-Fi Network (Client Isolation ON) na San Fa Mfiri a Ɛho Hia Patched Nkutoo Nkitaho"]
    RouterLockdown --> VLANIsolate
    SharedLockdown --> VLANIsolate

--- .

Ɔfã 1: Sɛnea ɔtowhyɛfo no kɔɔ wo mfoninitwa afiri anaa thermostat mu a wobɛhwehwɛ¶

Ansa na wobɛfa factory-reset biribiara no, hwɛ intrusion akwan anan a ɔtowhyɛfo no de dii dwuma no mu nea ɛwɔ he. Eyi kyerɛ wo sɛ ebia na ɔtowhyɛfo no nyaa cloud camera app biako pɛ anaasɛ wo fie Wi-Fi network nyinaa asɛe.

--- .

Ɔfã 2: Adanse a Wobɛkora So Ansa na Woasan Asiesie (Simma 2 kosi 15) .¶

Sɛ ɔhɔho bi ne wo ba kasae, haw w’abusua, anaasɛ ɔsrasra dan bi a wɔda mu a, saa adeyɛ no yɛ bɔne a ɛyɛ kɔmputa so a ɔde ne ho hyɛ mu na ɔhwehwɛɛ no. Twɛn simma 10 na fa dijitaal adanse anan yi ansa na woapopa anaa woapopa akontaabu ahorow, efisɛ sɛ wopopa afiri bi fi wo mununkum app mu pɛ a, adetɔnfo no mununkum somfo taa tew nsɛm a esisi ho kyerɛwtohɔ ne video a ɛbata ho no ho ntɛm ara:

1. Twe Video/Audio Clip no fi Camera no Cloud Timeline no so ntɛm ara:
2. Mfoninitwa mfiri a ɛma nneɛma keka ne nea ɛkɔ so kyere nsɛm gu kasɛt so dodow no ara (Ring, . Nest Aware, . Wyze Cam Plus, . Nanit, . Arlo, . Eufy) kyerɛw n’ankasa akasam no nnyigyei ne sɛnea dan no yɛ n’ade bere a wɔkasa wɔ akwan abien so no (Live View) no yɛ adwuma.
3. Bue event history timeline wɔ app no mu simma pɔtee a wotee nne no, download the .mp4 clip to wo fon no local camera roll, na nso screen-record event bere nhyehyɛe a ɛkyerɛ bere stamp pɔtee (HH:MM:SS ne bere nhyehyɛe).
4. Screenshot Camera App no "Mfiri a Wɔama Ho kwan" ne "Shared Users" list:
5. Wɔ Ring mu: Menu (≡) -> Control Center -> Authorized Client Devices NA Shared Users.
6. Wɔ Wyze mu no: Account -> Security -> Manage Devices / Two-Factor Authentication NA Account -> Sharing.
7. Wɔ Google Nest / Google Fie: Nsrahwɛ myaccount.google.com/device-activity na bue Google Home -> Settings -> Household.
8. Wɔ Arlo: Settings -> Profile -> Login Settings -> Trusted Devices NA Settings -> Grant Access.
9. Fa wo Home Router no sie System Log, . DHCP Client Table, na UPnP Table: 1. .
10. Kɔ wo router no wɛb interface no mu (http://192.168.1.1, . http://192.168.0.1, anaa http://10.0.0.1).
11. Kɔ ** .Administration / System Log** -> klik Save / Export Log (saa nkyerɛwee fael yi kyerɛw WAN nkitahodi a ɛba, UPnP port-mapping abisade, ne mpɔtam hɔ Wi-Fi MAC nokwaredi nsɛm a esisi).
12. Fa screenshot a ɛfa ** no ho.DHCP Leases / Attached Devices** list (titiriw hyɛ IP ne MAC address a ɛwɔ mpɔtam hɔ a ɛwɔ baby monitor/camera no nsow) ne ** .UPnP / . Port Forwarding** kratafa.
13. Kora Physical Camera no Serial Number, MAC Address, ne MicroSD Card so:
14. Sɛ mfoninitwa afiri no wɔ honam fam MicroSD card slot wɔ nkyɛn anaa ase (Wyze, . Eufy, . Tapo, . Reolink, . Foscam), pop MicroSD card no fi adi bere a camera no afi plug no na fa write-blocker bi twetwe anaasɛ kɔpi emu nsɛm no wɔ kɔmputa a ɛho tew so - mfoninitwa mfiri pii kyerɛw local .mp4 afã horow ne mpɔtam hɔ bi syslog.txt diagnostics fael no kɔ SD card no so tẽẽ sɛ mpo ɔtowhyɛfo no popaa cloud clip no a.

--- .

Ɔfã 3: Ɔtowfo no a wobɛpam no afi Wo Cloud Accounts mu (Brand-by-Brand Steps) .¶

Sɛ wode mfiri a wɔmma ho kwan no screenshots sie wie a, yɛ session kill a edi mũ wɔ wo camera, smart speaker, ne thermostat platform ahorow so:

1. Amazon na ɛwɔ hɔ Ring, . Blink, na Echo / Alexa (Akwan Abien "Drop In" Hijacks)¶

• Wɔ Ring App no mu:
• Bue mu Menu (≡) -> Control Center -> Authorized Client Devices -> tap "Yi Mfiri Nyinaa".
• Klik so Control Center -> Shared Users -> yi user biara a wunnim no fi hɔ.
• Klik so Control Center -> Account Verification -> sesa Nneɛma Abien Ahofadi fi SMS Nkyerɛwee kɔ Authentication App. 4.Kɔbɔ so Control Center -> Amazon Account Linking na hwɛ sɛ Amazon akontaabu bi a wunnim no wɔ abusuabɔ anaa.
• Wɔ Amazon Alexa App (Ɛho hia sɛ ɛnne bi nam Echo Dot / Echo Show so bae a):
• "Smart speaker voice intrusions" pii si efisɛ abusua muni bi, kan hokafo, anaa ɔtowhyɛfo bi maa Alexa "Drop In" (a ɛdan Echo akasam ma ɛbɛyɛ intercom a ɛkɔ akwan abien ntɛm ara a obiara a ɔwɔ dan no mu mmua) no yɛɛ adwuma.
• Bue Alexa App -> Mfiri -> paw wo Echo akasam -> Nsiesiei (gear ahyɛnsode) -> Nkitahodi -> Drop In -> hyehyɛ no Off (anaasɛ My Household Only).
• Nsrahwɛ amazon.com -> Account & Lists -> Login & Security -> sesa wo password na kɔ Manage Your Content and Devices -> Devices sɛ wobɛpopa Echo, Fire tablɛt, anaa Alexa app instɔlehyɛn biara a wonnim.

2. 2. . Google Nest Mfoninitwa mfiri, Ɔpon ano dɔn, Hub Max, ne Nest Thermostats¶

1. Esiane sɛ Nest de wo Google Account di dwuma nti, Nest camera anaa thermostat a wɔafa no kyerɛ sɛ wo Google Account nyinaa ayɛ basaa.
2. Bue ntɛm ara myaccount.google.com/device-activity -> sign out kɔmputa, telefon, anaa session biara a wunnim.
3. Bue mu myaccount.google.com/connections (Third-party apps & services) -> twa smart-home bridge anaa OAuth token biara a wonnim no mu.
4. Bue Google Home App -> Settings -> Household -> yi onipa biara a ɛnsɛ sɛ onya kwan kɔ wo fie bio, na hwɛ Settings -> Works with Google sɛnea ɛbɛyɛ a wobeyi nkabom ahorow a wonnim no afi nkitahodi mu.

3. 3. . Wyze, . Eufy, . Arlo, . TP-Link Tapo, na Nanit / Owlet Nneɛma a Wɔde Hwɛ Nkokoaa So¶

1. Sesa account password no ntɛm ara fi wo mobile app no so.
2. Ma Authenticator App ( ) no nyɛ adwuma.TOTP) Nneɛma Abien a Wɔde Di Dwuma wɔ Account -> Security.
3. Sesion-token quirk a ɛho hia wɔ sikasɛm nhyehyɛe IoT apps so: Ebinom nketewa baby monitor ne IP camera mununkum backends nnyɛ ntɛm ara sɛ active WebRTC / RTSP video streams bere a wosesa wo password nkutoo.
4. Sɛnea wobɛhyɛ-kum active stream wɔ cloud camera biara so: Sɛ wosesa wo password na woama 2FA ayɛ adwuma wie a, popa/yi camera no fi wo account no mu wɔ app no ​​mu, san fa camera no hyɛ mu bere a wokura ne Factory Reset button no mu sikani 15, na fa no bɔ mu fi mfiase. Re-pairing ma cryptographic device token foforo koraa ne P2P UID session key, twa asuten biara a ɛda so ara wɔ hɔ daa.

4. 4. . Ecobee, . Honeywell Home (Resideo), ne Smart Thermostats a wɔde yɛ nneɛma¶

Sɛ wo thermostat hyew no ankasa resakra anaasɛ ɛreda nkrasɛm ahorow a ɛyɛ nwonwa adi a: 1. Di kan hwɛ sɛ wo anyinam ahoɔden adwumayɛbea no de wo din hyɛɛ Demand Response / Peak Saver nhyehyɛe a ɛyɛ adwuma ankasa mu anaa (Eco+ wɔ Ecobee so anaasɛ Seasonal Savings on Nest) - utilities betumi afiri akyirikyiri asiesie ɔhyew digrii Celsius 2 kosi 3 (digrii Fahrenheit 3 kosi 5) wɔ bere a grid peaks gye sɛ wɔadi dɛm. 2. Sɛ na wɔde thermostat no krank kɔ ɔhyew/awɔw a ano yɛ den mu (32°C / 90°F anaasɛ 10°C / 50°F) anaasɛ PIN-locked by a attacker: twe thermostat faceplate no tẽẽ fi ɔfasu no so (a ɛtwa ne 24V R/ .C power wire na ɛma fononoo/AC no gyae ntɛm ara), san hyehyɛ wo cloud password, twa API integrations a ɛto so abiɛsa no mu (HomeKit, . SmartThings, . IFTTT), na fa Access Control PIN a ɛwɔ digit 4 si thermostat unit no so ansa na woasan abɔ ɔfasu no so.

--- .

Phase 4: Wo Fie Router a Wobɛto Mu & Wobɛyɛ IoT Guest VLAN a Atew ne Ho¶

Sɛ mpo adetɔnfo no cloud servers no wɔ ahobammɔ a, camera anaa baby monitor a ɛte flat koro no ara so 192.168.1.x Wi-Fi network sɛ w’ankasa laptop ne fon yɛ ahobammɔ ho asiane kɛse. Di anammɔn anum yi akyi na ama wo fie network ayɛ den wɔ simma 15 mu:

Anamɔn 1: Disable UPnP (Universal Plug and Play) Daa¶

1. Kɔ wo router admin krataafa no mu (192.168.1.1 / . 192.168.0.1 anaasɛ ɛnam wo mesh router app so te sɛ Eero, . Google Nest Wifi, . TP-Link Deco, . Netgear Orbi, . UniFi, . ASUS).
2. Kɔ ** .Advanced -> NAT Forwarding / WAN -> UPnP** na ɛyɛ.
3. Toggle ** .UPnP to OFF (Wɔayɛ adwuma)** na klik Apply / Save.
4. Nea enti a eyi ho hia: With UPnP sɛ wodum a, wɔmma mfoninitwa afiri a ɛyɛ atoro, smart TV, anaa NAS drive biara a ɛwɔ wo fie mu kwan da sɛ ɛbɛka akyerɛ router no sɛ onbue inbound port mfi ɔmanfo intanɛt a ɛwɔ w’akyi no mu.
5. Hwɛ ** .Port Forwarding / Virtual Servers** ne ** .DMZ**: Hwɛ sɛ Port Forwarding table no da mpan koraa (gye sɛ woahyɛ da ayɛ self-hosted server a wote ase) na sɛ DMZ yɛ nea wɔadi dɛm.

Anamɔn 2: Hwɛ Wo Public IP Address no so Shodan.io¶

Wopɛ sɛ wuhu wɔ sikɔne 10 mu sɛ na wo fie router no reda mfoninitwa afiri, nkokoaa monitor, printa, anaa NAS port biara adi wɔ ɔmanfo intanɛt so anaa? 1. Nsrahwɛ whatismyipaddress.com anaasɛ ifconfig.me fi wo fie Wi-Fi so kɔpi wo ɔmanfo IPv4 address (sɛ nhwɛso no, . 203.0.113.45). 2. Kɔ ** .https://www.shodan.io** na hwehwɛ wo baguam IP address (203.0.113.45). 3. Sɛ Shodan ka sɛ ** ."No information available" / . 404**, wo router firewall no yɛ yiye stealthing ports nyinaa. Sɛ Shodan kyerɛw hyɛn gyinabea ahorow a wɔabue (80, . 443, . 554 RTSP, . 1935 RTMP, . 8000, . 8080, . 37777), na wo router no reda mfiri ahorow adi tẽẽ wɔ intanɛt so - a ɛreyɛ adwuma UPnP, a wobɛpopa Port Forwards, na woadan OFF Remote Web Management (WAN Admin) a ɛwɔ wo router so no to saa ports no mu ntɛm ara.

Anamɔn 3: Fa Cameras, Baby Monitors, ne Smart Devices Nyinaa kɔ Isolated so Guest Wi-Fi (anaasɛ IoT VLAN) .¶

Wonhia adwumayɛbea ogya fasu a ne bo yɛ den na wode ayɛ ntwamutam nkyekyɛmu. Wi-Fi router ne mesh system ahorow a wɔde di dwuma ɔha biara mu nkyem 99 (Eero, . Netgear, . ASUS, . TP-Link, . ISP gateways) wɔ "Guest Wi-Fi Network" a wɔde ahyɛ mu a ɛyɛ adwuma sɛ VLAN a atew ne ho: 1. Wɔ wo router nhyehyɛe mu no, ma 2.4 GHz Guest Wi-Fi Network no nyɛ adwuma (ma no din a wɔatu ho ama te sɛ Home_IoT_24 ne nkyerɛwde 16 a ɛyɛ den WPA2/WPA3 password a ɛsono koraa wɔ wo Wi-Fi password titiriw no ho). 2. Hwɛ sɛ checkbox a wɔakyerɛw so "Ma ahɔho kwan ma wonhu wɔn ho wɔn ho na wɔnkɔ me mpɔtam hɔ ntwamutam" (Local Network Access / . Intranet Access) yɛ UNCHECKED (Disabled) - wɔtaa frɛ no ** .AP Client Isolation** na ɛyɛ. 3. Factory-reset wo baby monitor, smart cameras, smart plugs, robɔt vacuum, ne smart thermostat, na fa wɔn kwan so Guest / IoT Wi-Fi ntwamutam. 4. Fa w’ankasa laptops, desktop PCs, smartphones, tablets, ne NAS storage sie wo Main Wi-Fi Network so. Seesei, sɛ mpo IoT mfiri a ne bo nyɛ den wɔ zero-day firmware backdoor a, akɔhyɛ sandboxed tunnel a ɛtumi ne intanɛt nkutoo kasa na entumi nhu anaasɛ ɛntow nhyɛ wo kɔmputa so da.

Anamɔn 4: Wɔ Generic / No-Name IP Kamera (ONVIF / . RTSP), Siw Wɔn Intanɛt Siw (WAN) Nkɔso a Ɛkɔ So Koraa¶

Sɛ wode local di dwuma a RTSP / . ONVIF mfoninitwa mfiri a wɔde Home Assistant, . Frigate, . Scrypted, . Blue Iris, anaa Synology Surveillance Station, saa mfoninitwa mfiri no enhia intanɛt koraa: - Wɔ wo router no Firewall / Parental Controls / MAC Filtering krataafa no so no, fa static DHCP IP address ma camera no na hwɛ "Block Internet Access (WAN Block)" ma saa camera no MAC address. Mfoninitwa afiri no da so ara tumi de video a ɛyɛ fɛ kɔ wo fie hub so wɔ wo mpɔtam hɔ network so, bere a ɛbɛyɛ ɔha biara mu nkyem 100 a ɛrentumi nyɛ yiye wɔ honam fam sɛ obiara a ɔwɔ wo fie akyi no bedu mfoninitwa afiri no ho anaasɛ mfoninitwa afiri no bɛfrɛ fie akɔ amannɔne P2P server ahorow so.

--- .

Ɔfã 5: Honam fam kokoam nsɛm a wɔbɛma ayɛ den ama Nkokoaa ne Mpa¶

Software firewall biara nni hɔ a wotumi de ho to so te sɛ abɔde mu nneɛma ho nimdeɛ. Fa mmara anan yi di dwuma ma mfoninitwa afiri biara a ɛwɔ ofie mu:

• Mfa Wi-Fi mfoninitwa afiri a ɛwɔ mununkum mu nhyɛ mpanyimfo mpa anaa aguaree mu da, na fa nkokoaa a wɔhwɛ mmofra a wɔhwɛ mmofra so NKUTOO wɔ mpa no so: Angle nursery monitor no kɔ fam sɛnea ɛbɛyɛ a mpa no mu nkutoo na ɛwɔ frame no mu - da sesa pon, ayarehwɛfo nkongua, anaa mpa pon no da.
• Sesa kɔ Non-Wi-Fi Closed-Loop so DECT 6.0 anaa Digitals FHSS Baby Monitor ma Nkokoaa Dwumadibea: Mpɔtam hɔ-radio video monitor ahorow a wɔahyira so (te sɛ Infant Optics DXR-8 Pro, . Eufy SpaceView mpɔtam hɔ mode, . VTech non-Wi-Fi, anaa Babysense) wɔ Wi-Fi chip zero, cloud account zero, ne intanɛt nkitahodi zero. Esiane sɛ wɔmfa wɔn ho nhyɛ wo router anaa intanɛt so nti, hacker biara nni kurow anaa ɔman foforo mu a obetumi de credential-stuff anaasɛ hijack wɔn da.
• Fa Physical Lens Cap anaa Smart Plug Power Schedule di dwuma wɔ Indoor Living-Room Cameras so: Fa dan mu afieboa anaa dan mu mfoninitwa mfiri hyɛ mfiri bere timer a ɛnyɛ den anaasɛ nyansa plɔg a efi ɔsono adetɔnfo hɔ sɛnea ɛbɛyɛ a ahoɔden bɛtwa honam fam wɔ mfoninitwa afiri no mu bere biara a wowɔ fie, anaa tɔ mfoninitwa mfiri a mfiri hardware shutter a honam fam siw lens no na ɛtwa microphone circuit no mu bere a wɔato mu no.
• Gyae Kamera Gyinabea LED (Blue / Red Recording Light) Wɔahyɛ no den: Ntɛm ara na ntuafo pii kɔ mfoninitwa afiri no nhyehyɛe mu na wɔdan wɔn ho Status LED = OFF enti worenhu bere a wɔde nkitahodi bɛhwɛ no Live View. Hwɛ wo camera app nhyehyeɛ na ma recording status indicator LED no dane ON, na fa anyinam ahoɔden teyp a ɛyɛ den kata microphone pinhole no so sɛ womfa akwan mmienu audio nni dwuma da a.

--- .

Mpɔtam hɔ ntɛmpɛ nɔma ne adwumakuw no nhyehyɛe ahorow¶

Ofie ahobammɔ mfoninitwa afiri anaa nkokoaa a wɔde hwɛ nneɛma so a onni ho kwan no yɛ kɔmputa so a wɔde wɔn ho hyɛ mu ne mfomso a anibere wom a wɔde hwɛ nneɛma so. Bɔ amanneɛ ntɛm ara:

• United States: Dial ** .911** sɛ wususuw sɛ obi a ɔreba wo fie bɛn wo fie a. Fa amanneɛbɔ kɔ FBI IC3 (ic3.gov) a screenshots a ɛfa login a wɔmma ho kwan, IP address, ne timestamp (18 U.S.C. § 1030 CFAA ne 18 U.S.C. § 2261A), na bɔ IoT hardware a ahobammɔ nnim ho amanneɛ kyerɛ FTC (ReportFraud.ftc.gov) na ɛyɛ.
• Canada: Bɔ ** .911**, fa polisifo nsɛm kɔdan aban wɔ Afa 342.1 ne 162 (Voyeurism) a ɛwɔ Criminal Code of Canada ase, na bɔ Canadian Center for Cyber Security (cyber.gc.ca) na ɛyɛ.
• Ahemman: Dial ** .999** (anaasɛ 101 ma polisifo a wɔnyɛ ntɛmpɛ) na wɔbɔ amanneɛ sɛ wɔmfa kwan a wɔmma ho kwan wɔ Computer Misuse Act 1990 ase kɔ Action Fraud (0300 123 2040 / . actionfraud.police.uk) na ɛyɛ.
• Europa Aman Nkabom Kuw: Dial 112 wɔ EU aman nyinaa mu na wɔde nsɛmmɔnedi ho nsɛm kɔdan ɔman no kɔmputa so nsɛmmɔnedi polisifo.
• Australia ne New Zealand: Dial ** .000** wɔ Australia anaa ** .111** wɔ New Zealand; amanneɛbɔ kɔma ACSC (cyber.gov.au / . 1300 292 371) anaa CERT NZ (0800 237 869) na ɛyɛ.
• India ne Asia-Pacific: Dial ** .112** ma ntɛmpɛ ho mmuae anaa ** .1930** ( ) .cybercrime.gov.in) sɛ wɔbɛbɔ amanneɛ sɛ wɔde mfoninitwa afiri a wɔmma ho kwan wɔ Information Technology Act, 2000 no Nkyɛmu 66 ne 66E ase.

--- .

Nsɛm a wɔtaa bisa¶

Mɛyɛ dɛn ahu sɛ onipa a ɔnam me camera so kasae no yɛ random internet hacker vs. obi a ɔde n’ani si me fie so pɔtee?¶

Hwɛ nneɛma abien: (1) . So wosan de wo camera account no email ne password dii dwuma wɔ wɛbsaet afoforo so a woamma Two-Factor Authentication (`2FA`)? Na (2) . dɛn na ɛnne no kae? Wɔ nsɛm bɛboro ɔha biara mu 90 mu a ɔhɔho bi teɛteɛm nsɛm a ɛyɛ katee, bɔ nnwom, anaasɛ ɔka sɛ ɔyɛ "Santa Claus" anaasɛ hacker denam a Ring, . Wyze na ɔkyerɛwee, anaa Berebuw camera, ɛyɛ a hokwan a wɔde bɛhyɛ adansedi nkrataa mu ntua: automated bots sɔɔ email/password abien ɔpepem pii a ɛretu afi data dedaw a wɔabu so mu hwɛe (`haveibeenpwned.com`), hui sɛ wo password no yɛ adwuma wɔ Ring/Wyze so, na trolls wɔ online forum anaa Discord server mu de wɔn ho bɔɔ random cameras du du pii prɛko pɛ a wonnim kurow anaa ɔmantam a wote mu mpo asɛm a obi a onim no, ne hokafo dedaw, anaa ofipamfo de n’ani asi so na bɔ mpɔtam hɔ polisifo amanneɛ ntɛm ara.

Adɛn nti na me camera no motorized lens no tu anaasɛ ɛkliki ne ho anadwo - so ɛno kyerɛ bere nyinaa sɛ hacker bi rehwɛ?¶

Ɛnyɛ bere nyinaa - mfiri abiɛsa a ɛnyɛ bɔne wɔ hɔ a ɛma mfoninitwa afiri klik anaasɛ ɛkɔ anadwo a ɛsɛ sɛ wopow bere a woahwɛ wo login logs akyi: (1) Infrared ( .`IR`) Twitwa Filter a Wobɛkyere: Sɛ dan mu kanea so tew bere a ade asa anaasɛ kar kanea bi twam a, mfiri bi a ɛwɔ mfoninitwa afiri no mu no de infrared filter bi fa ahwehwɛ no so honam fam denam nea wɔte so "klik-klik-klik". nnyigyei; (2) . Firmware Reboot & Calibration a ɛyɛ adwuma ankasa: Ɛkame ayɛ sɛ pan-and-tilt a wɔde mfiri ayɛ nyinaa (`PTZ`) mfoninitwa mfiri ( .`Wyze Cam Pan`, . `Eufy Indoor Cam Pan`, . `Tapo`, . `Reolink`) hyehyɛ firmware updates a ɛyɛ adwuma ankasa wɔ 2:00 AM ne 4:00 AM ntam, na sɛ wɔsan fi ase a, wɔn stepper motor ahorow no di akɔneaba digrii 360 fi benkum kɔ nifa ne soro kɔ fam de hwɛ sɛnea wɔn fie gyinabea te; ne (3) . Auto-Motion Tracking a Wɔde Di Dwuma: Sɛ "Motion Tracking" yɛ adwuma wɔ app no mu a, ceiling fan, pet, anaa dust mote a ɛwɔ infrared LED no anim betumi ama lens no ayɛ pan atwa dan no mu. Hwɛ wo app no mu Mfiri a Wɔama Ho Kwan list ne firmware update timestamp a wode besi so dua.

So metumi ahyɛ me camera vendor (Ring, . Wyze, . Nest, . Arlo, . Nanit) sɛ ɔbɛka onipa a ɔkɔɔ me akontaabu mu na ɔne me ba kasae no IP address akyerɛ me?¶

Aane. Sɛ mpo app no mfitiase user interface no kyerɛ device type (te sɛ "Chrome wɔ Windows so". anaasɛ "iPhone" na ɛyɛ.) ne bɛyɛ kurow, adetɔnfo no akyi ahotoso ne WebRTC media servers log pɛpɛɛpɛ source IPv4/IPv6 address, User-Agent string, nhyiamu mfitiaseɛ/awieɛ berɛ nsɔano, ne akwan mmienu ɔdio dwumadie adeyɛ. Ntɛm ara bue mmoa tekiti a adetɔnfo no Ahobammɔ / Kokoamsɛm Kuw no ka kyerɛ wɔn sɛ wɔnyɛ saa kora nokwaredi ne WebRTC nhyiamu nsɛm nyinaa so ma wo akonta, na bere koro no ara mu de mpɔtam hɔ polisifo amanneɛbɔ ne GDPR/CCPA Subject Access Request (`DSAR`) ma wo akontaabu no login IP abakɔsɛm nyinaa.

So nkokoaa a wɔhwɛ so a ɛka sɛ "2.4 GHz FHSS" no yɛ nea ahobammɔ wom fi intanɛt so hackers nsam?¶

Yiw, efi intanɛt so hackers: obi a wɔatu wɔn ho ama 2.4 GHz FHSS na ɛyɛ adwuma (Frequency-Hopping Spread Spectrum) monitor a ɛba ne n’ankasa nsa so ɔwofo screen na enni Wi-Fi chip anaa smartphone app no yɛ ɔha biara mu nkyem 100 ahobammɔ fi intanɛt hackers, credential stuffing, ne router mmerɛwyɛ ahorow ho. Nanso, ɛtɔ mmere bi a analog/FHSS monitor ahorow a wɔmfa encrypted a ne bo nyɛ den anaa dedaw betumi agye radio a ɛtwetwe adwene bere tiaa bi anaasɛ cross-talk afi nkokoaa monitor foforo, telefon a enni nhama, anaa amateur radio a ɛwɔ mu no mu Mita 90 kosi 300 (anammɔn 300 kosi 1,000) .. Nnɛyi dijitaal DECT 6.0 anaa AES-128 encrypted FHSS monitors siw radio so snooping a wɔnyɛ hwee no ano.

Sɛ miyi mfoninitwa afiri no fi plug mu anadwo biako pɛ na mesan de hyɛ mu ɔkyena a mansesa me password a, so wɔabɔ hacker no ase?¶

Dabi. Sɛ woyi mfoninitwa afiri no fi afiri no mu a, ɛtwa anyinam ahoɔden no mu bere a hama no afi ɔfasu no mu nkutoo. Millisecond a wobɛsan de camera no ahyɛ mu ɔkyena a worentwa sessions no mu, worensesa wo cloud password, womma 2FA nyɛ adwuma, anaasɛ worennyɛ router no adwuma UPnP na ɛwɔ hɔ, mfoninitwa afiri no san kɔ mununkum akontaabu koro no ara pɛpɛɛpɛ (baabi a ɔtowhyɛfo no fon da so ara kɔ mu na onya amanneɛbɔ a wɔde piapia no ntɛm ara sɛ wo mfoninitwa afiri no asan aba intanɛt so). Mfa mfoninitwa afiri a asɛe no nsan nkɔ mu da kosi sɛ wubewie Ɔfa 3 ne 4 a ɛwɔ atifi hɔ no.

Na sɛ ɔhokafo dedaw bi a ɔyɛ basabasa de... Ring, . Nest, anaa Eufy cameras bere a na yɛte boom na "Owner / Primary Admin" account no wɔ WƆN email address mu?¶

Wɔ smart-home ecosystems te sɛ Ring, . Berebuw, . Arlo, na Eufy na ɔkyerɛwee, "Shared User" ntumi mpopa anaasɛ nyi "Primary Owner" akontaabu no mfi mu - na sɛ mpo wo mia honam fam Factory Reset bɔtn no wɔ Ring anaa Arlo mfoninitwa afiri so a, afiri no serial nɔma/MAC address no da so ara yɛ nea wɔatoto mu wɔ cryptographic kwan so (`Device Theft / Ownership Lock`) kɔ Owner no akontaabu a edi kan no so kosi sɛ wɔbɛbɔ "Remove Device" wɔ wɔn app no ​​mu. Sɛ ɔhokafo dedaw bi a ɔyɛ ayayade ne mfoninitwa mfiri, apon ano dɔn, anaa smart locks wura a wɔakyerɛw ne din wɔ wo fie a, . yi wɔn mfoninitwa mfiri no fi plug no mu na fa honam fam yi wɔn mfoninitwa mfiri no si fam ntɛm ara, fa hardware a wɔakyerɛw din wɔ w’ankasa email akontaabu foforo koraa mu nkutoo si ananmu, na sesa wo fie Wi-Fi network din (`SSID`) ne password sɛnea ɛbɛyɛ a wɔn mfiri dedaw no rentumi nsan nkɔ so bio da.

--- .

Akwankyerɛ ahorow a ɛfa ho¶

• Smart home hack, mfoninitwa afiri a wɔkyere, ne stalkerware
• Ofie router ne IoT mfiri ahorow a wɔbɛbɔ ho ban
• Credential stuffing automated bot ntua wɔ nokwaredi akwansin, akyɛde nkrataa, ne akontaabu so
• Ofie anaa ɔfese ketewa NAS (QNAP/Synology) ne UPnP hyɛn gyinabea a wɔde kɔ anim a wɔatoto mu a wɔasɛe no
• DNS hijacking, ISP router WAN nhyehyɛe foforo, ne captive portal spoofing
• Nnɔmba a egye ntɛmpɛ sɛnea ɔman biara te

--- .

Fibea ne aban akwankyerɛ¶

• Ɔman no Nhwehwɛmu Dwumadibea (FBI) (United States): Ɔmanfoɔ Dwumadie Dawurubɔ I-123020-PSA & Smart Home IoT Afotuo: Smart Cameras, Baby Monitors, ne Voice Assistants a wɔbɛbɔ ho ban atia Credential Stuffing ne "Swatting" Hijacks.
• Intanɛt so Ahobammɔ ne Nneɛma a Wɔde Yɛ Adwuma Ahobammɔ Dwumadibea (CISA) & Ɔman Ahobammɔ Dwumadibea (NSA) (United States): * Cybersecurity Information Krataa: Wireless Networks a ɛbɔ ho ban, UPnP a wɔbɛma ayɛ adwuma, ne Home IoT Mfiri a Wɔkyekyɛ mu wɔ Guest VLANs so*.
• Ɔman Aguadi Bagua (FTC) (United States): IP Cameras ne Intanɛt so Nkokoaa Monitor a Wɔde Di Dwuma Dwoodwoo.
• Ɔman Intanɛt so Ahobammɔ Asoɛe (NCSC) (United Kingdom): Smart Devices wɔ Fie: Mfoninitwa mfiri, Nkokoaa Monitor, ne Smart Speakers a Wɔde Siesie Ahobammɔ & Product Security and Telecommunications Infrastructure (PSTI) Mmara Akwankyerɛ.
• Europa Aman Nkabom Asoɛe a Ɛhwɛ Intanɛt So Ahobammɔ So (ENISA): Akwankyerɛ a ɛfa Intanɛt a ɛfa nneɛma ho (IoT) ne Home Network Segmentation a wɔbɛbɔ ho ban.