Stories
Slash Boxes
Comments

SoylentNews is people

posted by CoolHand on Thursday March 30 2017, @08:49PM   Printer-friendly
from the not-even-couch-potatoes-are-safe dept.

A new attack on smart TVs allows a malicious actor to take over devices using rogue DVB-T (Digital Video Broadcasting — Terrestrial) signals, get root access on the smart TV, and use the device for all sorts of nasty actions, ranging from DDoS attacks to spying on end users.

The attack, developed by Rafael Scheel, a security researcher working for Swiss cyber security consulting company Oneconsult, is unique and much more dangerous than previous smart TV hacks.

Until now, all smart TV exploits relied on attackers having physical access to the device, in order to plug in an USB that executes malicious code. Other attacks relied on social engineering, meaning attackers had to trick users into installing a malicious app on their TV.

Even the mighty CIA developed a hacking tool named "Weeping Angel," which could take over Samsung smart TVs and turn them into spying devices. But despite its considerable human and financial resources, the CIA and its operators needed physical access to install Weeping Angel, which made it less likely to be used in mass attacks, and was only feasible if deployed on one target at a time, during carefully-planned operations.

Because of the many constraints that come with physical and social engineering attacks, Scheel didn't consider any of them as truly dangerous, and decided to create his own.

Source: BleepingComputer


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 4, Interesting) by Scruffy Beard 2 on Thursday March 30 2017, @10:05PM (1 child)

    by Scruffy Beard 2 (6030) on Thursday March 30 2017, @10:05PM (#486772)

    Careful: HDMI 1.4 [hdmi.org] includes an Ethernet connection. Presumably because nobody wants to bother hooking their console, TV, Blu-Ray Player, etc all to the network separately. But for some reason all of those devices need updates in the field.

    Starting Score:    1  point
    Moderation   +2  
       Interesting=1, Informative=1, Total=2
    Extra 'Interesting' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   4  
  • (Score: 2) by kaszz on Thursday March 30 2017, @11:22PM

    by kaszz (4211) on Thursday March 30 2017, @11:22PM (#486807) Journal

    Cut pin 14 in the HDMI connector ?
    If audio return is a problem rewire it to a converter box, ie HDMI-to-Toslink etc.

    This perhaps also mean that otherwise the audio amplifier could be infected by the TV via HDMI and the TV via the game console which is networked..