Hackers Accessed Thousands of Video Footages By a Security Camera Company
Tesla and other Cloudfare sites' data, at risk as cloud-based security camera company, was hit by a malicious attacker. Experts say that the incident was like the recent SolarWinds events.
The malicious group allegedly hacked the Verkada security camera firm, used by companies like Tesla, schools, prisons, and hospitals, and obtained access to full video archives from the security camera.
Tilli Kottmann, one of the hackers, said that their goal was to fight for information freedom and against intellectual property, a big part of anti-capitalism, a little bit of anarchism, and "it's also just too much fun not to do it."
The group had hacked the system by accessing the super admin account after obtaining the details of the Verkada administrator login account, which was also posted online.
As the Kottman and other malicious groups were able to access Verkada customer's full video archives, the hackers published a video online of the security footage from Tesla's Shanghai factory with transport start-up Virgin Hyperloop, which was said to be the main reason for the attack.
They have also leaked online the security camera footage of the inside of the Madison County jail in Huntsville, Alabama, the Wadley Regional Medical Center, Hospital in Texarkana, luxury gym in equinox, Texas and among others.
Verkada spokesperson said that the attackers had already lost access to the footage as they have already disabled the internal administrator accounts in order to prevent unauthorized access. The spokesperson also added that the internal security team, together with an external security firm, is already investigating "the scale and scope of the issue," and they have already notified the law enforcement regarding the incident.
Danny Jerkins, Threatlocker CEO, said that every company should make sure that their own house is most secured, citing the importance of access restrictions against unwanted applications and basic controls like authentication being implemented.
He likened the breach in Verkada to the SolarWinds breach, where the perpetrators, who are based in Russia, were able to access the software firm to spy on several US government departments.
