During Kaspersky Lab’s annual Cyber Security Weekend 2019 in Cape Town last weekend, Reuben Paul, a 13-year-old 7th grader known as “Cyber Ninja”, showed how he could hack into a drone. The demonstration exposed the gaping holes in the security measures of millions of everyday gadgets and technology devices that are part of the Internet of Things (IoT).
Reuben demonstrated that he could disconnect a user from his drone and then take complete control of it by exploiting its insecure protocols. The drone hack performed by the 13 year old was a controlled stunt organised by Kaspersky Lab to highlight the urgent need for stricter measures from companies developing Internet of Things related-devices such as drones, baby monitors, smart appliances, smart home devices, and connected toys.
Kaspersky Lab advises people to inquire about the security measures taken and to understand the associated risks before buying any connected device. While governments already have tight controls in place around devices such as drones, companies on the other hand, still need to take the security aspect more seriously.
“Many companies compete to get their connected products out to the market and the consumers at the fastest speed to start generating profit,” said Maher Yamout, Senior Security Researcher at the Global Research and Analysis Team at Kaspersky Lab. “But doing so often means they overlook the security features or even completely ignore the security issues. Such devices can become lion’s meat for hackers and if they fall prey, this could lead to invasion of privacy, loss of data, valuables and even life.”
Said Reuben Paul: “It took me less than 10 minutes to hack the drone and I managed to take full control of it. The insecurities in the drone are shared by other IoT devices. Now imagine if this had been done by cyber-criminals. If I can do it, who’s not to say that more motivated cyber-criminals would not be able to do something very similar. The consequences could be disastrous.
“We need to reinvent cyber security because what we are doing so far is clearly not enough. It is important for manufacturers to implement security controls into their devices and not put consumers at risk! Let us be careful that the Internet of Things does not become the Internet of Threats.”
There are around seven billion internet connected devices in the world according to data from IoT analytics, with the cyber security risk remaining phenomenal. The impacts of these hacks are seen already, with multiple IoT related security incidents happening around the world.
More information on Reuben and the hack can be viewed below.
