Attackers Could Use Cameras’ IR Lights to Access Networks
A cybersecurity team from Ben-Gurion University of the Negev, Israel, led by Dr. Mordechai Guri, published a report demonstrating that attackers could use surveillance cameras and infrared light to establish bi-directional, covert communication with the internal networks of organizations.
The report describes two methods with which attackers can exploit the technology: exfiltration and infiltration. In exfiltration, attackers can either use malware to access the surveillance cameras across the local network and controls the IR illumination. Sensitive data such as PIN codes, passwords, and encryption keys are then modulated, encoded, and transmitted over the IR signals.