Connect with us

News

Firm Reveals How Smart Toy Vulnerabilities Could Let Cybercriminals Video-chat with Kids

Published

on

Kindly share this post

Vulnerabilities in a popular smart toy robot could make children potential targets for cybercriminals, Kaspersky researchers have discovered.

The weaknesses could enable hackers to take control of the toy’s system and misuse it to secretly communicate with kids through video chat without parental consent.

The risks associated with the robot system’s application extend to dangers that sensitive details such as users’ names, genders, ages and even their locations may be compromised.

An Android-based robot designed for kids is equipped with a built-in video camera and microphone. It harnesses artificial intelligence (AI) to recognise and interact with children by name and to adjust its responses based on the child’s mood, gradually getting acquainted with them over time.

To unlock the full potential of the toy, parents are required to download the application to their mobile device. Through this app, parents can track the child’s progress with their learning activities and even initiate a video call with the child via the robot.

During initial setup, parents are instructed to connect the toy to a Wi-Fi network, link it to their mobile device, then provide the child’s name and age. During this phase, Kaspersky experts have uncovered a concerning security issue: the responsible API (Application Programming Interface) for requesting this information lacks authentication enforcement, a step that confirms who can access your network resources.

This potentially allows cybercriminals to intercept and access various types of data – including the child’s name, age, gender, country of residence, and even their IP address – by intercepting and analysing the network traffic.

What’s more, this flaw enables cybercriminals to exploit the robot’s camera and microphone, initiating direct calls to the users, bypassing the required authorisation from the guardians’ account.

If a child accepts this call, an attacker can communicate covertly, without parents’ consent. In such cases, the attacker could manipulate the user, potentially luring them out of the safety of their home or influencing them into engaging in risky behaviours.

Furthermore, security issues of the parent’s mobile application may enable an attacker to remotely take control over the robot and gain unauthorised access to the network.

Using brute-force methods to recover the six-digit one time-password (OTP), and with no enforced limit on failed attempts, an attacker could remotely link the robot to his own account, effectively taking the device out of its owner’s control.

“When purchasing smart toys, it becomes imperative to prioritise not only their entertainment and educational value but also their safety and security features.

“Despite the common belief that a higher price tag implies enhanced security, it is essential to understand that even the most expensive smart toys may not be immune to vulnerabilities that attackers can exploit.

“Hence, parents must carefully examine toy reviews, remain vigilant about updating smart device software, and closely supervise their child’s activities during playtime,” comments Nikolay Frolov, senior security researcher at Kaspersky’s ICS CERT.

The findings from the team’s thorough research were presented during the panel session titled ‘Empowering the Vulnerable in the Digital Environment’ at Mobile World Congress (MWC) 2024.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

News

Legit.ng, Shade of Life Foundation Partner to Advance Autism Awareness in Nigeria

Published

on

Kindly share this post

Legit.ng recently joined forces with the Shade of Life Foundation to become a voice of autism, and drive advocacy for improved media support during Autism Awareness Month.

Legit.ng, Shade of Life Foundation Partner to Advance Autism Awareness in Nigeria

Participants at the event

Conversations around media support exploration was led by Joseph Omotayo, head of Department for Human Interest Stories at Legit.ng, and Dr. Eziafakaku Nwokolo, founder and CEO of the Shade of Life Foundation,

This partnership is a response to the concerns raised by organizations like the Shade of Life Foundation about the level of support received from the media in discussing autism as a disability.

While other disabilities may receive attention, autism, with its critical developmental implications often lacks adequate representation in mainstream media.

Recognizing the importance of addressing these concerns, Legit.ng took proactive steps by integrating itself into the essence of autism awareness.

It facilitated a one-hour workshop with Dr. Nwokolo, the founder of the foundation, to deepen our understanding of autism, its various spectrums, and the language boundaries associated with it.

Other steps we took in advocating autism awareness in the media, can be seen in our attached press release.

Legit.ng believes that by amplifying the voices of autism and advocating for better media representation, we can contribute to creating a more inclusive and accepting society for all.

 

 

 

 

 

 

 

 

 


Kindly share this post
Continue Reading

News

As Nigeria Struggle, Tanzania Turns off Power Plants Due to Excess Supply

Published

on

Kindly share this post

While 85 per cent of Nigeria is in darkness, Tanzania, an African country has shut down five hydroelectric stations in a bid to reduce excess electricity in the national grid.

As Nigeria Struggle, Tanzania Turns off Power Plants Due to Excess Supply

Kassim Majaliwa, prime minister, Tanzania, has said the main plant, Mwalimu Nyerere Hydroelectric Station, alone generated enough electricity to power major cities, including Dar es Salaam, the country’s commercial hub.

It is the first time Tanzania, which suffers chronic power shortages, has closed hydroelectric stations due to excess production.

“We have turned off all these stations because the demand is low and the electricity production is too much, we have no allocation now,” an official from state-run power company, Tanesco, said.

The 2,115MW Julius Nyerere Hydropower Dam is said to be almost filled with water following heavy rains that started early this year.

Meanwhile, while the country has an installed capacity of 1,938MW and the grid installed capacity of 1,899MW, Nigeria which has an installed capacity of 13,000MW is struggling to electrify 85 per cent of its electricity consumers.


Kindly share this post
Continue Reading

News

President Tinubu Appoints Jim Ovia as Student Loan Fund Chairman

Published

on

Kindly share this post

President Bola Tinubu has approved the appointment of Jim Ovia, renowned banker and businessman, as the Chairman, Board of the Nigerian Education Loan Fund.

Jim Ovia

Jim Ovia

Ovia’s appointment is contained in a State House statement titled, ‘President Tinubu appoints Jim Ovia as Chairman of the Nigerian Education Loan Fund,’ and issued on Friday by Ajuri Ngelale, special adviser to the President, Media & Publicity.

The statement noted that “Ovia is the founder of one of Nigeria’s leading banks and a respected business leader, with a surfeit of efforts and benefaction towards nurturing and empowering young Nigerians.

“He is an alumnus of Harvard Business School and holds a Master’s in Business Administration from the University of Louisiana.”

The National Student Loan Programme is a pivotal intervention that seeks to guarantee sustainable higher education and functional skill development for all Nigerian students and youths.

The Nigerian Education Loan Fund, the implementing institution of this innovation, demands excellence and Nigerians of the finest professional ilk to guide and manage.

“The President believes Mr. Ovia will bring his immense wealth of experience and professional stature to this role to advance the all-important vision of ensuring that no Nigerian student suffers a capricious end to their pursuit of higher education over a lack of funds,” the statement partly read.

Ovia’s appointment will also ensure “that Nigerian youths, irrespective of who they are, have access to higher education and skills that will make them productive members of society and core contributors to the knowledge-based global economy of this century.”


Kindly share this post
Continue Reading

Trending