VIDEO: Internet-connected cameras made in China may be used to spy on US infrastructure- DHS
A recent bulletin by the Department of Homeland Security warns citizens and industry of Chinese espionage using internet connected cameras. ABC News obtained the bulletin and highlights this threat. This article by Anna Ribero of Industrial Cyber also highlights the issue. Click the previous links to read the full articles. (Video below)
From ABC News:
Internet-connected cameras made in China are giving the Chinese government the ability to “conduct espionage or disrupt US critical infrastructure,” according to a Department of Homeland Security bulletin obtained by ABC News.
The cameras typically lack data encryption and security settings and, by default, communicate with their manufacturer. It’s believed there are tens of thousands of Chinese-made cameras on the networks of critical U.S. infrastructure entities, including within the chemical and energy sectors, the bulletin said.
Chinese cyber-operatives have previously exploited internet-connected cameras and the fear is China could gain access and manipulate systems without tighter restrictions on these cameras, the DHS warns.
“A cyber actor could leverage cameras placed on IT networks for initial access and pivot to other devices to exfiltrate sensitive process data that an actor could use for attack planning or disrupting business systems,” the bulletin said. “A cyber actor could use cameras placed on safety systems to suppress alarms, trigger false alarms, or pivot to disable fail-safe mechanisms.”
So far, China has successfully kept U.S. regulators from blocking the use of internet-connected cameras made in China through the use of a practice known as “white labeling,” where the cameras are imported after they’re packaged and sold by another company, according to the bulletin.
