Security researcher gets access to all Xiaomi pet feeders around the world

guest · Oct 28, 2019

Security researcher gets access to all Xiaomi pet feeders around the world
Russian security researcher finds API and firmware bugs impacting around 10,950 Xiaomi FurryTail pet feeders
October 28, 2019
https://www.zdnet.com/article/secur...s-to-all-xiaomi-pet-feeders-around-the-world/

A Russian security researcher said she accidentally found a way to hack and take over all Xiaomi pet feeders located across the world.

In a series of messages published on her private Telegram channel last week, Anna Prosvetova, a security researcher from Saint Petersburg, Russia, said she identified vulnerabilities in the backend API and firmware of Xiaomi FurryTail smart pet feeders.
These are smart pet food containers that can be configured with the help of a mobile app to release small quantities of food at certain times of day.
RESEARCHER LOCATES 10,950 FURRYTAIL FEEDERS
Prosvetova said that while looking at a device she bought from AliExpress for only $80, she found that the API allowed her to see all other FurryTail devices active located across the world.
Prosvetova said the vulnerabilities would have been ideal for hackers looking into hijacking the pet feeders into an IoT DDoS botnet, as the entire process could be easily automated and carried out at scale.
Click to expand...

Log in or Sign up

Security researcher gets access to all Xiaomi pet feeders around the world

guest Guest

Log in or Sign up

Security researcher gets access to all Xiaomi pet feeders around the world

guest Guest

Useful Searches