The aspect of information security is typically given little or no attention in the development of IoT devices. As a consequence, it has often been possible in the past to misuse IoT devices to collect information on users and their areas of activity. For example, there have been repeated incidents in connection with networked and IP-based surveillance cameras:

• In 2013, several banks in various countries were compromised in the course of the “Carbanak” campaign with the help of surveillance cameras. The attackers obtained hundreds of millions. Within the framework of these attacks, the cameras were used to capture screen contents and keyboard input in the banks targeted.
• In 2014, the “Insecam” website was used to publicly disclose video images and streams from 73,000 poorly protected webcams.
• In 2015, the “Conficker” malware (which was already eight years old at the time) infected numerous bodycams of different federal and state police forces in Germany.

• BSI -

  Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)