Imagine your kids playing with their dog when suddenly a voice starts talking to them from your pet camera. Or a stranger walks into your houser instead of the close friend you just saw in your doorbell camera. These are real stories that happened to ordinary people, all thanks to hacked Ring devices. Read on to learn more about them.
Ring is an Amazon-owned home security company which offers smart security cameras and video doorbells.
The Ring doorbell is a smart home device that allows you to control your front door remotely. It’s mounted next to your front door and connected to your mobile device via Wi-Fi. When someone comes to your house, you can see the person through the camera and let them in remotely.
The company also offers indoor and outdoor cameras which allow you to monitor your home while you are away, check on your kids, or keep an eye on your pets. The cameras are equipped with motion sensors and a two-way talk feature, allowing you to talk to someone in real time.
Ring has long been subject to various security issues. While some have been addressed and eventually resolved, Ring security cameras and doorbells still have a bad track record. This leaves us with the question: Can Ring devices be hacked? The answer is yes, they can.
Researchers at Dojo, an internet of things security company, have found that bad actors can intercept your Ring doorbell by accessing the network it uses. This is possible because the data traveling between the Ring device and its application is not encrypted. As a result, anyone who’s hacked your Ring device can monitor who enters or leaves your house and can even steal your Wi-Fi password. Moreover, they can trick you into letting in a stranger by showing you a video of someone you know. Amazon claims that the issue was fixed in later versions of the app.
Ring cameras are not any better. Ashley LeMay sued Ring after a stranger talked to her daughter through a hacked indoor security camera. An unidentified hacker gained access to the camera and its microphone and told the 8-year-old that he was Santa and that she should destroy her belongings. Another family also had their Ring camera hacked — a cybercriminal started talking to them as they were getting ready for bed.
Take a look at this news report featuring videos from hacked Ring cameras:
While Ring can be held accountable for most of these issues, users are not completely blameless either. People rely heavily on companies to safeguard their data, often forgetting to be cautious themselves. In 2019, more than 3000 Ring users’ credentials ended up online. They came from a credential stuffing attack, not the company’s databases. The hackers took username and password combinations from other breaches and used them to log into Ring accounts. Since people tend to use the same credentials for most of their accounts, many of those attacks were successful.
The incident may not have occurred if Ring had any additional security protocols that inform their users about logins from unfamiliar IP addresses. It’s also impossible to view your account's login history to determine if someone’s been snooping around.
Countless reports submitted by Ring users make it even harder to trust the company’s security choices. Some claimed they still managed to log into the app using their old password after changing it — and that’s with two-factor authentication enabled. Another incident involved a Reddit user who reported that his Ring doorbell was sending packets of data to China. The company has acknowledged the problem and promised to issue an update to resolve it.
If you still want to use Ring security cameras and doorbells, make sure you take the following precautions:
Ring devices sound like a great solution for keeping you and your home safe.However, they may present other potential dangers to you and your family. If you plan to use them, always take the necessary precautions and never fully rely on companies to do it for you.
To learn more about cybersecurity, subscribe to our monthly blog newsletter below!