4 ms·
I got a few of these (related) cameras on Aliexpress a little while back and yes, they also had the same malware. Saw it immediately as Chrome flagged it when I
by buserror 11y ago
I got a few of these (related) cameras on Aliexpress a little while back and yes, they also had the same malware. Saw it immediately as Chrome flagged it when I loaded the UI page.
There are some 'vanilla' firmware around that can be reflashed, but it's definitely not into most people's ability to reflash them.
it's too bad, it is very nice hardware, and the price is incredible...
- ams6110 11y agoSo if i just resolve that domain to 0.0.0.0 on my local network, is the camera safe to use?
- lstamour 11y agoNo, I'd flash the firmware on the camera first before trusting it. Alternatively, connect the cameras to a second network without any internet access at all, which is probably best for security to the cameras anyway.
- buserror 11y agoYou can also give them DHCP leases that don't set the gateway. That's usually a good idea anyway, and it's pretty easy to do if you use something like dnsmasq. On my config I have an IP range on my subnet that is the default one and doesn't set the gateway. When I 'trust' the device I add it's MAC to the list of trusted ones.