• Log In
  • Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • HomePage
  • About
  • Structure
  • Schedule
    • First Half of the Semester
      • Week 1: Overview of Course
      • Week 2: TCP/IP and Network Architecture
      • Week 3: Reconnaissance
      • Week 4: Vulnerability scanning
      • Week 5: System and User enumeration
      • Week 6: Sniffers
      • Week 7: NetCat, Hellcat
    • Second Half of the Semester
      • Week 8: Social Engineering, Encoding, and Encryption
      • Week 9: Malware
      • Week 10: Web application hacking, Intercepting Proxies, and URL Editing
      • Week 11: SQL injection
      • Week 12: Web Services
      • Week 13: Evasion Techniques
      • Week 14: Review of all topics and wrap up discussion
  • Assignments
    • Analysis Reports
    • Quizzes & Tests
  • Webex
  • Harvard Coursepack
  • Gradebook

ITACS 5211: Introduction to Ethical Hacking

Wade Mackay

Backdoor accounts found in 80 Sony IP security camera models

December 7, 2016 by Brent Easley 3 Comments

http://www.pcworld.com/article/3147311/security/backdoor-accounts-found-in-80-sony-ip-security-camera-models.html

Network security cameras that were created by Sony could have been compromised with botnet malware if their firmware is not updated to the latest version.  This was detected by SEC Consult, they found two backdoor accounts that existed in 80 models of professional Sony security cameras.  Some of these devices were used at government agencies.  Sony was notified about the vulnerability in October and released firmware updates for all the affected camera models on November 28th.

Filed Under: Week 13: Evasion Techniques Tagged With:

Reader Interactions

Comments

  1. Vaibhav Shukla says

    December 7, 2016 at 3:54 pm

    I think the last DDOS attack which took place last month and bought down many websites across USA had made use of IOT devices as botnet to launch the attacks.This loophole can be a serious concern as the cameras can be made to work as bot net by hackers who can take control over it through the backdoor malware reported

    Log in to Reply
  2. Arkadiy Kantor says

    December 8, 2016 at 1:37 pm

    its great that they released a new firmware, but I wonder how often do people stay on top of keeping things updated with such devices? I havent seen or heard of security devices being on the radar for IT folks typically and are probably forgotten once they are installed.

    Log in to Reply
  3. Scott Radaszkiewicz says

    December 8, 2016 at 2:45 pm

    Good article. Of course, after the latest round of attacks, everyone is worried about their IP enabled devices, such as cameras. I have many IP enabled devices, including cameras in my work place. Because of dumb luck, or genius, even with vulnerable software, we are ok. When we setup our network, we reconfigured separate VLAN’s for devices, such as cameras. Those VLAN”s can’t access the Internet, so they can only broadcast traffic internal.

    Log in to Reply

Leave a Reply Cancel reply

You must be logged in to post a comment.

Primary Sidebar

Weekly Discussions

  • Uncategorized (133)
  • Week 01: Overview (1)
  • Week 02: TCP/IP and Network Architecture (8)
  • Week 03: Reconnaisance (25)
  • Week 04: Vulnerability Scanning (19)
  • Week 05: System and User Enumeration (15)
  • Week 06: Sniffers (9)
  • Week 07: NetCat and HellCat (11)
  • Week 08: Social Engineering, Encoding and Encryption (12)
  • Week 09: Malware (14)
  • Week 10: Web Application Hacking (12)
  • Week 11: SQL Injection (11)
  • Week 12: Web Services (10)
  • Week 13: Evasion Techniques (7)
  • Week 14: Review of all topics (5)

Copyright © 2025 · Magazine Pro Theme on Genesis Framework · WordPress · Log in