We are living in a time where everything is becoming digitally connected. It’s known as the Internet of Things (IoT). It means that devices can communicate with each other, and you, not only within your home but across the internet. While this provides much convenience, it also comes with increased privacy and security risks. Hackers are eying up your smart devices and targeting them. They are valuable stores of information and data that they can leverage for their personal gain. And they are spoiled for choice- the number of devices in our homes that are now smart is increasing. But what are the smart home devices most targeted by hackers?
The reality is that the number of connected devices is growing exponentially. By 2025 the number of connected devices is expected to reach 4.6 billion according to estimates shared by ZDnet. The main driver of IoT is from the automotive industry, manufacturing and healthcare. But, “smart” consumer devices are finding their way into our personal lives and our homes. In fact, even if you’ve not heard of IoT, you probably have a smart IoT-capable device in your home. You might not have it purposely connected, but even then, it may still be communicating.
Wi-Fi-enabled entertainment systems and home appliances are all part of smart homes. They can also be connected to security systems and other devices. There are 42.2 million smart houses in the United States. The number is growing annually by an estimated 12%, according to Statista. And the number of US homes with smart technology is expected to increase from 33.2% in 2021 to 43.5% in 2023.
That means whether you like it or not, many of the consumer electronics that you will purchase over the next few years will be IoT devices.
Smart Home Trends
In 2021, the Consumers Electronics Show (CES) was online. It is one of the most important global tech events. The COVID-19 pandemic hampered companies’ ability to interact with consumers and tech enthusiasts. However, it also helped accelerate tech development. Companies raced to innovate and cover new markets, including developing disinfecting robots and air filtration systems. Home entertainment systems, smart TVs and appliances designed for home use, have seen many improvements. Nearly all the products displayed at CES 2021 attempted to address the COVID-19 pandemic.
Smart TVs have been the focus of much attention in recent years. TV sales have increased during the pandemic, and manufacturers are diversifying what they offer. The resolution of these smart TVs has also been escalating. And these High-res offerings are very attractive to consumers. For example at CES 21, TCL unveiled its next 6-series of QLED TVs. These TVs offer 8k resolution. And Sony also introduced a range of TVs- their A90J OLED TV series. These are powered by Sony’s new Cognitive Processor XR, which leverages AI and machine-learning to improve image quality. And then there’s another big player, Samsung, that also unveiled their new QLED TVs, called Neo, which also utilize AI-enabled processors.
Smart-home speakers also continue to grow in popularity. These devices can act as a hub, not just as speakers. Think of Alexa for example. You communicate through voice commands with Alexa. And it’s very convenient. For example, ask a question, and Alexa will return the answer. Command Alex to play a song, and presto, it’s blaring throughout your living room. But smart speakers can also be used to control other connected devices, like perhaps turning on smart light bulbs or adjusting the connected thermostat.
Can Smart Home Devices Be Hacked?
Yes, all home automation devices can be hacked and compromised. When a smart device is hacked, it allows a cybercriminal to gain private information and monitor your behaviour. Devices with cameras can even be used to spy on you in your home.
Although the new technology behind smart home devices is amazing and very convenient, remember that it also presents new cybersecurity risks and challenges. It is possible to hack any device that connects to the internet, including smart appliances, even a coffee maker! Cybersecurity experts around the world have adopted the motto “If you connect it, then protect it!” to help raise awareness about cyber threats in our homes.
Why would someone hack into your home?
There are several reasons why a hacker would want to access your smart devices. One would be to infiltrate and steal data. It could even lead to hackers demanding ransom for confidential information.
On the more innocent but irritating side, it could be that a hacker wants to play with your devices and control them.
Perhaps the most insidious of attacks are listening to your personal conversations or using connected cameras to spy on you. These devices could also be used to outline your schedule and show when you leave home. This leads to possible physical security risks. Even a smart front door could possibly be hacked.
So yes, devices connected to each other and accessible through networks and the internet are an attractive gateway for hackers.
How Often are Smart Homes Hacked?
OK, we know that smart devices are vulnerable to hacking. But the statistics are actually quite astonishing.
A 2021 investigation by UK consumer group Which? highlighted smart home vulnerabilities. For their research, they have a house fitted with smart devices. They showed this one home experienced over ten thousand hacking attacks per week!
In this research, the device which was targeted the most was an Epson printer. The printer was not compromised however and remained secure. An ieGeek camera purchase from Amazon didn’t do as well. After the publication of the Which? report Amazon removed the listing. This isn’t the first time camera hacking has been liked to Amazon-related products. In 2019 consumer groups expressed concern over Amazon Ring devices after a slew of successful hacks came to light.
So, what are the most common cyber threats overall? What are the smart home devices most targeted by hackers? There are two smart devices that are typically targeted by cybercriminals more than others…
The Smart Home Devices Most Targeted by Hackers
Cyber Threat Target #1: Smart TVs
Smart TVs, like any Wi-Fi-connected device, can be hacked. For example, in 2016 a ransomware variant of Cyber.Police (FLocker), affected LG Android TVs. And the worm ADB.Miner was used to infect Android-based smart TVs in 2018, with the intent to mine cryptocurrency. Cybercriminals can also hijack the microphone and integrated camera to spy on smart TV users.
The risks are so extensive and complex that even the FBI has issued warnings to smart TV owners about the cyber threats.
Cyber Threat Target #2: Smart Home Speakers
Privacy and security risks are present in smart home speakers too, also known as Smart Home Assistants. These include Amazon Echo or Google Home.
Cybercriminals have the ability to exploit vulnerabilities in Bluetooth connections, such as BlueBorne. They can also use malware embedded in apps.
Check Point researchers were able to hack Amazon Alexa. Alexa is the AI behind Amazon’s vast range of smart speakers. Researchers were able to hack into the target user’s device by sending a malicious link. They also obtained the bank data and extracted the voice search history. They also successfully changed the apps on the device. This was possible due to vulnerabilities in Amazon/Alexa subdomains, which were prone to configuration issues in Cross-Origin Resource Sharing and Cross Site Scripting.
Smart home speakers are causing a lot of controversy when it comes to privacy. Artificial intelligence assistants can listen to you and respond to all your questions. They are activated most often by a user’s wake-up call, but they can also be activated by accident. They gather data to improve their prediction and these recordings are stored in the cloud. The recordings of voice commands and search queries can also be used to improve the service. Sometimes, with human reviewers, they can even improve voice recognition AI. This data can be used to create a better user profile and deliver personalized ads. You can opt-out of data sharing if you are concerned about privacy or do not want to be targeted with personalized ads.
Smart Speaker Threats Will Continue
Smart devices are “smart” because they are connected to each other. And this presents the biggest problem. From 2019 Amazon and Google began to require status-change updates for all devices controlled by their digital voice assistants. This means that your smart home assistant will be notified if you turn on your smart lights. Then, y smart home assistant may ask you to turn the light on at the time you normally do this. Amazon calls this function “Alexa Hunches”. It is intended to increase convenience. But convenience can put our privacy at risk. Smart home assistants used to require a constant stream of data from connected devices before they could send a command. They were first supposed to ping the device to check its status and then send the command. This is easier for privacy-conscious individuals as well as manufacturers of smart home devices.
Steps to Take to Secure Your Smart Devices
There are several ways for you to secure your smart home devices. These are generally best practices for any home. But these simple steps can help secure your IoT stuff and prevent successful hacking attempts!
- Make sure to use a strong WiFi password on your home network.
- Use a VPN when online. It will encrypt you connection.
- Where possible, enable 2-step verification on all personal accounts
- Make sure all software and OS are up-to-date. This will install security patches.
- Set up a separate guest WiFi network for visitors to your home.
- Do not use a default password on devices. Change the password and make them strong.
- Ensure you review the security settings on apps and devices.
- Disable or even cover connected cameras when not in use.
The Final Score
In an increasingly connected world, cyber threats will abound. It’s important to stay ahead with adequate security. In our increasingly “smart homes”, we have a growing number of connected devices and some are more vulnerable than others. The two smart devices most targeted by hackers in the home are smart TVs and Smart Speakers and Assistants (like Alexa).
To reduce your risk, make sure you use strong WiFi passwords and set up a guest WiFi network for visitors, use 2FA, update all software regularly, and use a VPN when possible.
Be smart and stay safe.