Hackers Stalked Me by Hijacking a Smartwatch for Kids

Security researchers tracked and eavesdropped on a WIRED reporter using vulnerabilities in a pink plastic smartwatch. It’s just one piece of a deeply insecure supply chain of GPS-enabled gadgets.

Vangelis Stykas, a security researcher, and his team tracked and eavesdropped on a WIRED reporter using a pink plastic smartwatch designed for kids. The watch, which cost around $50, was vulnerable to hacking due to its weak security protocols. Stykas' team was able to access the watch's GPS location, microphone, and camera, allowing them to stalk the reporter. The team used a technique called "man-in-the-middle" to intercept and manipulate the watch's communications.

This vulnerability directly affects parents who purchase GPS-enabled smartwatches for their children, potentially putting their kids' safety at risk. The average cost of these smartwatches can range from $30 to $100, with some popular brands like TickTalk and Kurio selling thousands of units worldwide. Parents who rely on these devices to track their children's location may be unknowingly putting them in harm's way. This risk can lead to a significant financial burden on households, with some parents opting for more expensive and secure alternatives.

The hacking of the kid's smartwatch is part of a larger pattern of insecurity in the Internet of Things (IoT) industry. In recent years, numerous vulnerabilities have been discovered in various IoT devices, including smart home appliances and fitness trackers. Insiders know that the rush to market and the lack of regulation have contributed to this problem, with many devices being released without adequate security testing. The IoT industry is expected to grow to over $1 trillion by 2025, making it a significant target for hackers.

On August 15, the Federal Trade Commission (FTC) is set to release a report on the state of IoT security, which may lead to new regulations and guidelines for device manufacturers. The report is expected to highlight the need for improved security protocols and better disclosure of vulnerabilities to consumers. Meanwhile, Vangelis Stykas' team is working on a new project to develop a more secure and open-source alternative to commercial smartwatches, which could potentially disrupt the entire industry. Interestingly, the team's research has shown that some of these vulnerabilities can be exploited using nothing more than a smartphone and a few lines of code.