Alexa, the connected Amazon speaker. Drawing. – Jessie Wardarski / AP / SIPA
Specialists in cybersecurity of Check Point recently managed to hack the artificial intelligence system
Alexa after having detected a security breach. Researchers warned Amazon, which took steps to end the vulnerability, reports Numerama.
Check Point experts have exploited the weaknesses of some sites in the field amazon.com. They could then modify the programming from outside using HTML instructions. Once the changes were made, the researchers used phishing campaigns to trick users into the affected pages, thereby stealing customer credentials.
Hijacked Alexa functionalities
The “hackers” could then have access to these accounts and to all the features offered, modifying them at will. For example, specialists have set up a program that activates the camera when the customer asks for the weather forecast. Dozens of similar operations were possible thanks to the flaw.
By the way, the “good” hackers have had access to personal information about Amazon customers and their Alexa usage history. This is data that malicious hackers could have resold or used to remotely manipulate the approximately 200 million connected devices and objects operating with the virtual assistant.
–
