Malicious hackers can take over control of vacuum and lawn mower robots made by Ecovacs to spy on their owners using the devices’ cameras and microphones, new research has found.
Security researchers Dennis Giese and Braelynn are due to speak at the Def Con hacking conference on Saturday detailing their research into Ecovacs robots. When they analyzed several Ecovacs products, the two researchers found a number of issues that can be abused to hack the robots via Bluetooth and surreptitiously switch on microphones and cameras remotely.
“Their security was really, really, really, really bad,” Giese told TechCrunch in an interview ahead of the talk.
The researchers said they reached out to Ecovacs to report the vulnerabilities but never heard back from the company, and believe the vulnerabilities are still not fixed and could be exploited by hackers.
As someone who has never felt the need for a roomba
What so you like so much about it?
I dispise vacuuming and sweeping and I have 2 canines, so there’s a lot of fur and grime on the floor that needs regular tending to. I bought the roomba model that is self charging and self emptying, so you can just let it run in a set it and forget it fashion.
Alternatively, it also actually helps motivate me to do other chores as well. I have to pick up everything off the floor before running the vac, and at that point I just start tidying up other things while letting it run.
I have a German Shepherd who sheds a lot and my vacuum runs every, single, day.
Being able to offload all that work to a machine is a godsend.