Vulnerability in LG Hom-Bot Allows Hackers to Use the Device’s Camera and Spy

Vulnerability in LG Hom-Bot Allows Hackers to Use the Device’s Camera and Spy

Vulnerability in LG Hom-Bot Allows Hackers to Use the Device’s Camera and Spy

Vulnerability in LG Hom-Bot Allows Hackers to Use the Device’s Camera and Spy

Check Point researchers have discovered a vulnerability in LG’s Hom-Bot vacuum cleaner. Hackers can now hijack the LG SmartThing home appliances, thanks to this vulnerability. The affected devices include dryers, refrigerators, vacuum cleaners, dishwashers, and microwaves.

The experts demonstrated their findings by showing how hackers could compromise LG Hom-Bot. The video camera installed inside the device can be controlled by the hackers.

The first part involves disassembling the LG Hom-Bot to locate the UART (Universal Asynchronous Receiver/Transmitter) connection. Once they had done this, they had to make sure the main process debugged. After that, they look for the connection between the SmartThing and Hom-Bot.

The researchers said,

“This is when we had the idea to investigate the SmartThinQ application – leading to the discovery of the HomeHack flaw.”

The process was possible using debugging tools and a rooted phone. Once the SSL pining and anti-root mechanism bypassed. Hackers could intercept the application’s traffic. Thus, now an LG account could be created.

The researchers from CheckPoint also performed an analysis of the login process. They were not able to find any link between the creation of username based signature and the authentication request. It can help them identify the actual user credentials.

Once they had all this data, the only thing hackers needed to bypass confirmation process. Then switch to the owner’s username to get access for completing the process. “By exploiting the vulnerability, the attacker could take over the victim’s account. Also, control his smart LG devices,” experts noted.

LG was quick to fix the issue after the announcement of the vulnerability on July 31st, 2017. The solution made by LG included a fix to the SmartThing application. Altogether with urging users to update to the app from Google or Apple Play Store. The process to update the app is quite simple. The update button is available on Dashboard of the SmartThing app. A step by step solution is given below.

CheckPoint researchers express their concerns about hacker’s new focus on individual devices. A consequence of the advances made in hacking capabilities, affect more than ever.

How to Protect from HomeHack Vulnerability

The users of LG SmartThinQ mobile app should update the app, to protect their devices. Experts also tell users to take the following steps if they want to secure their devices:
  • Download the updated version of LG SmartThinQ app from Google and Apple Play Store.
  • You can update the app via its settings.
  • Smart home physical appliances should up to date.
  • Click on the ‘smart home product’ under smartThinQ Dashboard.
  • If the update is missing a popup will alert you about it.

17 Comments

  1. Who says hackers are not real? I read several comments on YouTube and on Quora when they recommended a hacker. I mailed him when I suspected my wife was cheating and you wouldn’t believe this hacker helped me hack into her phone without any glitch. He did it remotely and swiftly without my wife knowing, i discovered my wife wasn’t actually cheating, i’m glad I contacted Hacklord first instead of confronting my wife.Here is his Gmail Stephenlogicalhacklord@gmail.Com contact him on or on whatsapp +19094479732 and You can text or call him on +19094479732 for anyone that may require his help

    • GENUINEHACKERS9 ON GMAIL says:

      I just broke with a guy I was in love with, but also by, as I once believed, a true friend. I was in a really bad place emotionally because I had the suspicion my partner was cheating but I couldn’t confirm it. I reached out to a close friend and she introduced me to him. He explained how he would grant me access to my partners’ phone without him being aware, of course I was skeptical at first but I had to erase the doubts so I went through with the process and he delivered giving me access to old texts and incoming texts on Whatsapp, Facebook, message he also got me into his Instagram account and I was able to confirm my suspicion and leave that toxic relationship contact Fred hacker. I made the right call doing this because of the relief I felt after you may also need this service if you find yourself with an untrustworthy partner, Contact him on fredvalcyberghost@gmail.com and call/text him on +14236411452 AND WHATSAPP HIM ON +19782951763

      • Kelvin helped me hack into my wife phone under 2 hours with out having physical assess to her phone kelvinethicalhacker @gmailcom hacked into my wife text messages,deleted text messages,call logs,viber messages,whats-app messages,Facebook messages and many more this hacker is true and reliable his services are cheap and affordable you all can also contact him for help tell him i refereed you am sure he will help you

        • I dont like to meddle into people’s relationship but at thesame time its not appropriate the way men cheat this days and even maltreated their wives whenever confronted,it really baffle me.l was in this situation some month ago l have to search some forum then l came accross this hacker via his mail: samsmithcyberhost@gmail,com this guy really unveil somethings l can’t imagine happening in my relationship.l think it’s high time we ladies have to hire someone like sam in other to get the truth about your spouse it really help. contact him via
          Email: Samsmithcyberhost@gmail.com
          Text or Whatsapp on: +1 (747)345-9036..
          jjkl

          • I dont see a reason why people should painstakingly look about for apps and at the end it wont work the way it ought to. Having been in a situation before where I felt I needed to get proof to show him that he had been cheating before he would allow himself to be removed from the house, basically i suspected that he uses the whatsapp app more and has a face recognition security attached to it. I did what I had to do to save myself. If you are in that situation, be confident that it can be done. You may need to use a private investigator to be sure, if you have the funds to do so. you can contact via email: jeffreyethicalhacker@gmail.com .
            Text or WhatsApp:+1(747)345-6036.
            fghjk

          • Cheating for me is a deal breaker for me , I always told the previous women that I’ve had relationships with, the moment you are unfaithful is the moment you end our relationship. If I’ve ever felt so disconnected from my partner that I have felt myself drawn even into a hypothetical affair in my mind, I end the relationship. I’ve been in many abusive relationships (that I ultimately ended) but never once have I been unfaithful. Why? Because no failing relationship is worth sacrificing my morals and integrity for. No matter how it unfolds with a partner, there should be a base level of respect and empathy towards them as a human being. A failed relationship will not pollute your mind and foster insecurities anywhere near as as being on the receiving end of adultery. I dind’t know what was happening all along for years that she has been cheating until I met Samsmith the ethical hacker
            kindly contact him via email:Samsmithcyberhost@gmail.com
            Text call & Whatsapp on :+1 (323)374-3539..
            trdf

          • People find it hard to stay committed again. It’s becoming a difficult thing. Getting information & data you need is quite not a big deal. Sometimes the truth needs to be unveiled by whatsoever means necessary. The latter of the case should always be reckoned with, of which it would be known eventually what would be the data at hand afterwards. definitely contact Sam would do justice on this intercepting with wares and you will have me to thank later.
            I finally caught him red handed…
            They also have refund policy if you wish not to further with your job.
            Contact him via
            Email; Samsmithcyberhost@gmail.com

            whatsapp,Text or call on ;+1(323)374–3539.
            Tested and trusted.
            jhnbv

          • Every video/tutorial I have seen suggests we should send a link to the victim that he will open, or we should create an application which victim will install in his android set. But I need to learn something different. I need an way where I don’t need to send the victim any kind of link that victim must open, or where I don’t need the victim to install any app. It is because the victims I have targeted are smart enough. They don’t open any arbitrary link. Moreover, I don’t know their personal preference. I don’t know which kind of sites they like most. Furthermore, these people don’t install any application from any unauthorized source. This has been one of my greatest challenges for years untill l came accross this ethical call Jeffrey,which help e get my spouse phone hacked remotely without accessing or sending any link.

            kindly contact him via email: Jeffreyethicalhacker@gmail.com

            text call or whatsapp on: +1 (747)345–9036..
            dfvc

          • Tracking cellphones and getting an accurate report has been a bit worrisome, thanks to Jeffrey whose service helped me locate certain cellphones without breaking a sweat. His service made me know that the internet has become the most common method of cheating nowadays, either emotionally or physically. Taking a few extra steps in getting what would serve as proof for leaving a toxic relationship, to see who your spouse texts or chats with on social media isn’t a bad idea, I’d recommend you reach out to Jeffreyethicalhacker@gmail.com
            Text,call or whatsapp on: +1 (747)345-9036
            sdxwds

          • I dont like to meddle into people’s relationship but at thesame time its not appropriate the way men cheat this days and even maltreated their wives whenever confronted,it really baffle me.l was in this situation some month ago l have to search some forum then l came accross this hacker via his mail: samsmithcyberhost@gmail,com this guy really unveil somethings l can’t imagine happening in my relationship.l think it’s high time we ladies have to hire someone like sam in other to get the truth about your spouse it really help. contact him via
            Email: Samsmithcyberhost@gmail.com
            Text or Whatsapp on: +1 (747)345-9036..
            fghjk

          • I think this is the only way to show gratitude to this hacker called Sam,though he didn’t demand for this but l need to just do this,after falling victims of so many fake hackers,l hired him just for whatsapp only cos of my finacial capability cant believe this guy get all the whole App on his phone including text messages hacked and send me the artifact in other for to be able to view it from my phone.This guy restored my 11years marriage,l will forever be grateful to him for the laudable job weldon.
            If your’re in my shoe dont hesitate to contact him for help via,
            email: Samsmithcyberhost@gmail.com
            Text or whatsap on: +1 (747)345-9036..
            VHJN

          • To some extent l dont think quarelling with your partner is the best approach if your’e suspecting he/she is cheating,you understand that we are all human and we are prone to denying allegation that will ruin our reputation.Apply wisdom by hiring an Ethical hacker that can get all his devices hacked then you have your evidence,contact this ethical hacker via
            email: Samsmithcyberhost@gmail.com
            Text & Whatsapp on: +1 (747)345-9036..
            to get your partner device hack.
            OLL

  2. This is my advice to anyone who wants to hack a phone, do not pay for spy apps if you don’t have access to the phone. I wish I knew this sooner, I would not have spent so much on different spy apps. It took sometime before I finally found a way to hack my husband’s phone without having access to it. I mentioned my fears and insecurities to a friend and she recommended kelvinethicalhacker at gmail.com to me, This hacker provided a service that allows me to monitor his calls and conversations. I haven’t decided on what to do yet. I don’t think I can continue in this marriage. He is cheating on me.contact him here for help, via, kelvinethicalhacker@gmail.com,

    • GENUINEHACKERS9 ON GMAIL says:

      I just broke with a guy I was in love with, but also by, as I once believed, a true friend. I was in a really bad place emotionally because I had the suspicion my partner was cheating but I couldn’t confirm it. I reached out to a close friend and she introduced me to him. He explained how he would grant me access to my partners’ phone without him being aware, of course I was skeptical at first but I had to erase the doubts so I went through with the process and he delivered giving me access to old texts and incoming texts on Whatsapp, Facebook, message he also got me into his Instagram account and I was able to confirm my suspicion and leave that toxic relationship contact Fred hacker. I made the right call doing this because of the relief I felt after you may also need this service if you find yourself with an untrustworthy partner, Contact him on fredvalcyberghost@gmail.com and call/text him on +14236411452 AND WHATSAPP HIM ON +19782951763

  3. This is my advice to anyone who wants to hack a phone, do not pay for spy apps if you don’t have access to the phone. I wish I knew this sooner, I would not have spent so much on different spy apps. It took sometime before I finally found a way to hack my husband’s phone without having access to it. I mentioned my fears and insecurities to a friend and she recommended kelvinethicalhacker at gmail.com to me, This hacker provided a service that allows me to monitor his calls and conversations. I haven’t decided on what to do yet. I don’t think I can continue in this marriage. He is cheating on me.contact him here for help, via, kelvinethicalhacker@gmail.com.

  4. This is my advice to anyone who wants to hack a phone, do not pay for spy apps if you don’t have access to the phone. I wish I knew this sooner, I would not have spent so much on different spy apps. It took sometime before I finally found a way to hack my husband’s phone without having access to it. I mentioned my fears and insecurities to a friend and she recommended kelvinethicalhacker at gmail.com to me, This hacker provided a service that allows me to monitor his calls and conversations. I haven’t decided on what to do yet. I don’t think I can continue in this marriage. He is cheating on me.contact him here for help, via, kelvinethicalhacker@gmail.com. ry

  5. GENUINEHACKERS9 ON GMAIL says:

    I just broke with a guy I was in love with, but also by, as I once believed, a true friend. I was in a really bad place emotionally because I had the suspicion my partner was cheating but I couldn’t confirm it. I reached out to a close friend and she introduced me to him. He explained how he would grant me access to my partners’ phone without him being aware, of course I was skeptical at first but I had to erase the doubts so I went through with the process and he delivered giving me access to old texts and incoming texts on Whatsapp, Facebook, message he also got me into his Instagram account and I was able to confirm my suspicion and leave that toxic relationship contact Fred hacker. I made the right call doing this because of the relief I felt after you may also need this service if you find yourself with an untrustworthy partner, Contact him on fredvalcyberghost@gmail.com and call/text him on +14236411452 AND WHATSAPP HIM ON +19782951763

Leave a Reply

Your email address will not be published. Required fields are marked *