Amazon Alexa Bugs Allowed Hackers to Install Malicious Skills Remotely

Amazon Alexa Bugs Allowed Hackers to Install Malicious Skills Remotely 1

Attention! If you use Amazon’s voice assistant Alexa in you smart speakers, just opening an innocent-looking web-link could let attackers install hacking skills on it and spy on your activities remotely.

Cybersecurity researchers today disclosed severe security vulnerabilities in Amazon’s Alexa virtual assistant that could render it vulnerable to a number of malicious attacks.

cybersecurity

According to a report released by Check Point Research and shared with The Hacker News, the “exploits could have allowed an attacker to remove/install skills on the targeted victim’s Alexa account, access their voice history and acquire personal information through skill interaction when the user invokes the installed skill.”

“Smart speakers and virtual assistants are so commonplace that it’s easy to overlook just how much personal data they hold, and their role in controlling other smart devices in our homes,” Oded Vanunu, head of product vulnerabilities research, said.

“But hackers see them as entry points into peoples’ lives, giving them the opportunity to access data, eavesdrop on conversations or conduct other malicious actions without the owner being aware,” he…

http://feedproxy.google.com/~r/TheHackersNews/~3/FJ7V4ZqqfQA/amazon-alexa-hacking-skills.html

Have a comment? Type it below!