Learning with Technology
23.6K views | +0 today
Follow
Learning with Technology
Your new post is loading...
Your new post is loading...
Rescooped by NextLearning from ICT Security-Sécurité PC et Internet
Scoop.it!

New Way Found to Use Alexa, Google to 'Voice Phish' and Eavesdrop on Users | #CyberSecurity #CyberEspionage #Apps #Privacy

New Way Found to Use Alexa, Google to 'Voice Phish' and Eavesdrop on Users | #CyberSecurity #CyberEspionage #Apps #Privacy | Learning with Technology | Scoop.it

Developer interfaces used by Security Research Labs researchers to turn digital home assistants into ‘Smart Spies’.

Researchers have found new ways that bad actors can exploit Alexa and Google Home smart speakers to spy on users. This time the hack not only includes eavesdroping, but also includes voice-phishing, or using people’s voice cues to determine passwords.

The vulnerability lies in small apps created by developers for the devices to extend their capability called Skills for Alexa and second app called Actions on Google Home, according to a report by Security Research Labs (SRLabs). These apps “can be abused to listen in on users or vish (voice phish) their passwords,” researchers said.

“The privacy implications of an internet-connected microphone listening in to what you say are further reaching than previously understood,” researchers wrote in their report. “Users need to be more aware of the potential of malicious voice apps that abuse their smart speakers.”

 

Learn more / En savoir plus / Mehr erfahren:

 

https://www.scoop.it/t/securite-pc-et-internet/?&tag=Privacy

 

https://www.scoop.it/topic/securite-pc-et-internet/?&tag=Alexa

 


Via Gust MEES
Gust MEES's curator insight, October 21, 2019 7:23 AM

Developer interfaces used by Security Research Labs researchers to turn digital home assistants into ‘Smart Spies’.

Researchers have found new ways that bad actors can exploit Alexa and Google Home smart speakers to spy on users. This time the hack not only includes eavesdroping, but also includes voice-phishing, or using people’s voice cues to determine passwords.

The vulnerability lies in small apps created by developers for the devices to extend their capability called Skills for Alexa and second app called Actions on Google Home, according to a report by Security Research Labs (SRLabs). These apps “can be abused to listen in on users or vish (voice phish) their passwords,” researchers said.

“The privacy implications of an internet-connected microphone listening in to what you say are further reaching than previously understood,” researchers wrote in their report. “Users need to be more aware of the potential of malicious voice apps that abuse their smart speakers.”

 

Learn more / En savoir plus / Mehr erfahren:

 

https://www.scoop.it/t/securite-pc-et-internet/?&tag=Privacy

 

https://www.scoop.it/topic/securite-pc-et-internet/?&tag=Alexa

 

Rescooped by NextLearning from Best Freeware Software
Scoop.it!

Best and secure, trustful download web sites

Best and secure, trustful download web sites | Learning with Technology | Scoop.it

Don't download software from blogs and web sites without knowing if they are secure, if the software is malicious and...!!!


===> Update (28.02.2014): <===


Potentially Unwanted Programs (PUP)” are a piece of software that is also downloaded when a user downloads a specific program or application. THEY are similar to malware in that it will cause problems when it is downloaded and installed. THEY can be very embarrassing as one doesn’t get rid of them with normal tools, one needs definitely to use special tools to remove them.

Freeware publishers offer their products for free, but bundle them with PUPs in order to earn revenue and users are unaware of these additional installations because ===> they do not read agreements thoroughly. <===


In case that this happens to YOU, check my FREE tutorials on #How-To remove them & to protect:


http://gustmees.wordpress.com/2014/02/05/help-my-pc-is-infected-with-adware-toolbars-and-potentially-unwanted-programs-pups/


 

 

 

Here is a list of trustful download web sites:

 

CNET: http://www.download.com

 

TwoCows: http://www.twocows.com/

 

PC PLUS: http://pcplus.techradar.com/tag/web-pack/


HEISE (DE): http://www.heise.de/download/

 

ComputerBild (DE): http://www.computerbild.de/downloads/

 

Chip (DE): http://www.chip.de/Downloads_13649224.html

 

Clubic (FR): http://www.clubic.com/telecharger/

 

o1Net (FR): http://www.01net.com/telecharger/

 

Libellules (CH) with tutorials: http://www.libellules.ch/dotclear/

 

PC TIPP (CH): http://www.pctipp.ch/downloads/

 

SourceForge: http://sourceforge.net/

 

Will get updated often, stay tuned :-)

 

 


Via Gust MEES
Didier Caradec CEH/DPO/RSSI's curator insight, July 17, 2015 10:02 AM

Où télécharger vos logiciels sans danger. Une liste des sites.

Dennis Swender's curator insight, February 16, 2017 8:34 AM
Thanks, Gust, for your timely and incisive scoops.
Manon R.'s curator insight, December 4, 2019 10:34 AM
Excellent !