Hello Kitty hackers gained access to IP cameras in Orenburg

A group of teenage hackers Hello Kitty , which on April 19 discovered the personal data of clients of the travel agency “Tourinfo Group RFR”, used hacking to gain access to more than 150 IP cameras in Orenburg. Representatives of the group told TJ about this.

Hello Kitty was hacked thanks to an exploit in the Flussonic M server software for online control of video signals from a large number of IP cameras simultaneously. In new versions of the server, the exploit was closed by the manufacturer of Flussonic M, the Erlivideo company, but some companies still use its old version, which is susceptible to attacks.

Hackers discovered a server with a vulnerability at the Ufanet Internet provider, which operates in 10 Russian cities. In Orenburg, it operates under the legal entity ZAO Orenburg City Network - this company owns the IP address on which the Flussonic M server is located.

The server can manage video content from 150 web cameras located throughout the city. The image from these cameras can be viewed for free on the open portal Ufanet , but the company charges 1,500 rubles for access to a five-day video archive (for example, to provide evidence in the event of an accident).

You cannot control the cameras: Flussonic M only processes the image and can reload the broadcast, as well as store the recorded array and display it in various players. But by logging onto this server and gaining access to SSH (a network protocol for remote control), the hackers learned passwords from other IP cameras.

of these webcams in total There are about 30 ; where they are is unknown. On some of them you can see rooms with people, similar to an office or bar.

You can't move the lens of these cameras either, but they record sound and you can use them to listen to other people's conversations. Judging by the branding of the camera admin panels, they are produced by the Russian company RVi Group .

TJ was unable to find direct contacts of those responsible for the cameras on the Orenburg City Network website. the only general telephone number listed in the “Contacts” section: at the time of the call in Orenburg it was half past eleven at night. No one answered