Casino Gets Hacked Through Its Internet-Connected Fish Tank Thermometer

The Hacker News ^ | April 16, 2018 | Wang Wei

[TigerLikesRoosterNew]

---snip---

We have another great example that showcases how one innocent looking insecure IoT device connected to your network can cause security nightmares.

Nicole Eagan, the CEO of cybersecurity company Darktrace, told attendees at an event in London on Thursday how cybercriminals hacked an unnamed casino through its Internet-connected thermometer in an aquarium in the lobby of the casino.

According to what Eagan claimed, the hackers exploited a vulnerability in the thermostat to get a foothold in the network. Once there, they managed to access the high-roller database of gamblers and "then pulled it back across the network, out the thermostat, and up to the cloud."

Although Eagan did not disclose the identity of the casino, the incident she was sharing could be of last year, when Darktrace published a report [PDF], referencing to a thermometer hack of this sort on an unnamed casino based in North America.

---snip---

[MAAG]

Its not that hard, networks are not your friend.

[algore]

Why was it not connected to the “visitor/guest” network?

[TigerLikesRoosterNew]

They will dismiss thermometer hacking as another baseless claim until they are shown definite proof that it has been actually done before. If you see my reply #37, there is more detail. They will have to work much harder to come up with a new excuse to dismiss it.

[PLMerite]

[Casino Gets Hacked Through Its Internet-Connected Fish Tank Thermometer]

Just wait 'til SKYNET hacks the coke machines:

[krogers58]

Yes, the IoT could turn out to be a security nightmare...

You are correct, and it goes much deeper. We have abandoned all reason in entrusting critical military, infrastructure, and even medical devices to networking connectivity.

Traces can be placed on circuit boards which can enable connectivity to non networked devices. Once the circuit board is irradiated with magnetic radiation (Think radio-frequency, or even microwaves) and the circuit powers up, and serves the function for which it was designed.

The CIA/NSA have used these techinques for over a decade to gain remote access to non-netowked devices. There are even built in "compartments" in CPU's which allow illicit access and for illicit access to encryption keys stored on a partticular computer. Network cards and even usb ports can be altered to serve this purpose as well. Nothing should be stored electronically, which in irreplaceable, nor should control of systems be placed entirely in the hands of computers. It is said the B-2 bomber is unable to be flown, unless the computers onboard do the flying (aka fly-by-wire).

Imagine an advesary releasing a virus upon our country, where we'd need to use all those ventilators, but they suddenly stop working, or worse, they kill the patient by pumping too much air in, or not enough. Cars are becoming more vulnerable by the day. Computers may well be our doom, particularly once AI decides we are a dangerous virus upon this planet.

[dfwgator]

"You f'in momo!"

[Orosius]

They’re the experts, not me. I gather it’s the “passive” devices you don’t even think about that are the vulnerable points.

[TigerLikesRoosterNew]

Cheap mass-produced IoT devices come from a certain country which is not a friend of U.S.. They are saturating other countries with their devices.

However, Big Tech want to have them. They want to vastly expand their network. European IT companies also want to have them to cut down cost.

Military may be able to eliminate them from their system, but I am not sure civilian sector are willing to ditch them.

[glorgau]

That’s what they get for not partitioning their network...

[Libloather]

Semi-deep state?

[duckman]

“They are the hackers.”
Those fish could have micro chips imbedded.

[duckman]

“What thermostat was compromised, other than the one in the story?”
I recently read rectal thermometer’s have been compromised. Leave it to the Chicoms.

[newfreep]

Is it even possible to purchase a new “non-smart” TV today?

I’m looking at a new 4K but all seem to have “smart” technology.

[Petrosius]

Why in the world does anyone need to connect their fish tank thermometer to the internet?

[TigerLikesRoosterNew]

To automatically maintain fish tank in an optimal condition.

[Petrosius]

To automatically maintain fish tank in an optimal condition.

But could this not be done by a simple stand alone chip?

[Mouton]

Lots of sucker fish in those casinos.

[TigerLikesRoosterNew]

Read my reply #37. It contains further details. The thermometer is part of a bigger system which maintains the entire fish tank. It may have been a really big fish tank but I am not sure. The following is an excerpt:

“A North American casino recently installed a high-tech fish tank as a new attraction, with advanced sensors that automatically regulate temperature, salinity, and feeding schedules.”

[Elsie]

Should I worry that my newest pacemaker has WIFI?

[Elsie]

My Iphone six tells me, in my driveway, that I can make it to McDonalds in a certain amount of time.

It also has said that I can make it back home, in so many minutes, from various places I’ve been.