Hackers no longer need access to a computer to cause damage. A fridge, a security camera or a thermostat connected to the internet can also become the target of a cyberattack.
A recent attack on hundreds of supermarkets in France showed this. The attackers remotely changed the settings of the cooling systems, destroying large quantities of food and causing losses of millions of euros.
Similar security gaps can exist in everyday devices, from smart locks to internet-connected cars. Reuters has explained which devices are likely to be hacked, what hackers can do if they gain access and how the risk can be reduced.
Can a smart fridge be hacked?
Yes, if it is connected to the internet and has a security flaw that someone can exploit.
In 2015, researchers at a conference in Las Vegas demonstrated such an attack on a Samsung smart fridge. They managed to break into the device and intercept part of its online communication.
This does not mean all connected fridges are easy to hack. The risk depends on the software, the security settings and whether the manufacturer still provides updates.
The aim of an attack is not necessarily the device’s own function. A fridge can be used to steal data or as a way into other devices on the same network.
Which household devices are at risk?
Devices that can be hacked include security cameras, video doorbells, alarms, smart locks and thermostats.
Internet-connected washing machines, ovens and fridges are also potential targets. Even some electric toothbrushes now connect to apps.
The security of the router is especially important, because the other devices in a home connect to the internet through it.
According to cybersecurity industry data cited by Reuters, more than three quarters of attacks on connected devices target routers rather than the household appliances themselves.
A hacked router can allow attackers to monitor some internet traffic and attempt attacks on other devices using the same network.
What can a hacker do?
That depends on the device that is hacked.
A security camera can reveal images from inside a home. A device with a microphone may allow audio to be intercepted, and a compromised router can expose information transmitted over the network.
In other cases, attackers can switch devices on and off, change their settings or lock owners out of their accounts.
A hacker who takes control of a connected thermostat could affect a building’s heating. Likewise, a security flaw in a smart fridge or freezer could allow changes to its cooling settings.
Some attacks are not noticed straight away. A poorly protected device can be used to gain access to personal data or to other computers on the same network.
Can hackers control a car remotely?
Researchers have shown that it is technically possible by exploiting security flaws in specific models.
In 2015, they took remote control of a Jeep while it was being driven, through the vehicle’s internet-connected entertainment system. The discovery led to the recall of about 1.4 million vehicles so the necessary fixes could be installed.
Almost a decade later, researchers found a security flaw that allowed them to locate, unlock and start certain Kia cars knowing only their registration number. The company was informed and fixed the problem over the following months. There is no evidence that the flaw was used in real attacks.
Modern cars do, however, have safety systems and backup mechanisms that limit the consequences of a possible breach.
What about larger infrastructure?
Cyberattacks can also target larger infrastructure such as electricity and water networks.
These facilities usually have more security measures, monitoring systems and stricter operating rules. They are not immune, but breaking into them is generally harder than attacking an internet-connected household device.
How can the risk be reduced?
Cybersecurity experts recommend:
- Replacing factory passwords with strong, different passwords for each device
- Using two-factor authentication where it is supported, which requires a second confirmation to log in to an account
- Installing software updates, which often fix security flaws. Older devices that no longer receive updates need particular care and, in some cases, replacement
- Limiting devices’ internet access when it is not needed. Many can work only within a home’s local network, without being reachable from anywhere in the world
As the number of internet-connected devices grows, so do the potential entry points for hackers. Connectivity offers convenience, but not every device needs it.
With information from Reuters
