Researchers Find Fresh Fodder for IoT Attack Cannons
Summary: Researchers at SEC Consult found two undocumented backdoor accounts, named "primana" and "debug," in more than 80 Sony IPELA Engine IP camera models, and a Censys.io scan found at least 4,250 of these cameras reachable on the Internet. Separately, Cybereason found flaws in nearly a half-million white-labeled IP cameras that ship with the password "888888" and a factory-default peer-to-peer feature allowing remote access through the manufacturer's website.
Bottom line: Sony has released an update that disables the backdoor accounts, but users must manually apply it with the SNC Toolbox program, and Cybereason says the white-labeled cameras have no firmware update mechanism at all, leaving an estimated half-million devices that cannot be patched.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Mentions
- CVE-2015-7755
- Related
- CVE-2015-7755: Juniper ScreenOS Improper Authentication Vulnerability Known Exploited Vulnerabilities · Oct 02, 2025ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026