Security researchers at Internet of Things security firm Dojo by BullGuard took to the stage at Mobile World Congress to hack an Amazon Ring video doorbell in real time. The successful exploit took advantage of a security vulnerability that could leave audio and video transmissions exposed to third-party attackers.
The attack is a bit of a complicated one, but it works like this: An attacker gains access to a person’s Wi-Fi network, either by guessing the password, cracking the encryption, or exploiting another smart home device connected to the same network. The attack requires the Ring owner to be connected to the same network, as well. Once connected, the attacker can see audio and video as it is transmitted from the Ring video doorbell to the Ring application used by the owner. That footage is unencrypted when transmitted, making it easy to intercept once a hacker has gained access.
Ever wonder why amazon gives you the option to save WiFi password to your account for easier access?