A Russian website has been posting live video streams from unprotected webcams in homes and businesses around the globe, Britain's Information Commissioner's Office warned on Thursday.
The website has gained access to the webcams using the cameras' default login credentials, which are freely available online but often don't get changed by their owners during the set-up process.
Baby monitors and CCTV networks are among the systems that have been compromised, explained Simon Rice, the ICO's group manager for technology.
The Russian site, insecam.cc, appeared to be down on Thursday afternoon.
Reportedly listed on the offending site, according to the BBC, were streams from more than 250 countries and other territories, including 4,591 cameras in the United States, 2,059 in France, 1,576 in the Netherlands and 500 in the UK.
Foscam is the most commonly listed camera brand, followed by Linksys and then Panasonic, the BBC reported. Foscam also is the brand of baby monitor that reportedly was compromised last year in a Texas family's home.
The Band-Aid Solution
"It isn't hard for people to get access to webcams when default credentials are not changed," Jarad Carleton, a principal consultant with Frost & Sullivan, told TechNewsWorld. "Users should always change default credentials, but many times people don't."
Many people also mistakenly believe that "nobody would be interested in hacking dad or granddad's webcam," Carleton added, "but any potential burglar or thief would love the intel a webcam can offer. Personally, I keep a Band-Aid over the webcam on my laptop, and I know of a lot of security professionals that do the same."
It's surprising that computer manufacturers haven't started including a simple manual shutter to cover webcam lenses when they aren't in use, he said.
"What's even more disturbing is they have webcams on smart TVs now without manual shutters," Carleton pointed out. "So, if you mount one of those TVs on the wall in your bedroom and it gets hacked, someone could see a lot of you and your partner."
'An Important Message'
Though this latest case is new, the problem has been around for some time, said Ken Westin, a security analyst for Tripwire.
"The Russian website making these feeds public is creepy, but it just provides the public with the same information security researchers and malicious hackers have had access to for years," Westin told TechNewsWorld.
"Hopefully, the silver lining of the publicity this website is generating is that consumers will become more aware of the default settings on cameras, as well as the general security vulnerabilities in these devices," he said.
