'Dronejacking' may be the next big cyber threat

6 Dec 2016

WASHINGTON, USA - A big rise in drone use is likely to lead to a new wave of "dronejackings" by cybercriminals, security experts warned.

Image by 123RF

A report by Intel's McAfee Labs said hackers are expected to start targeting drones used for deliveries, law enforcement or camera crews, in addition to hobbyists.

"Drones are well on the way to becoming a major tool for shippers, law enforcement agencies, photographers, farmers, the news media, and more," said Intel Security's Bruce Snell, in the company's annual threat report.

Snell said the concept of dronejacking was demonstrated at a security conference last year, where researchers showed how someone could easily take control of a toy drone.

"Although taking over a kid's drone may seem amusing and not that big of an issue, once we look at the increase in drone usage, potential problems starts to arise," he said. The report noted that many consumer drones lack adequate security, which makes it easy for an outside hacker to take control.

Companies like Amazon and UPS are expected to use drones for package deliveries - becoming potential targets for criminals, the report said. "Someone looking to 'dronejack' deliveries could find a location with regular drone traffic and wait for the targets to appear," the report said.

"Once a package delivery drone is overhead, the drone could be sent to the ground, allowing the criminal to steal the package." The researchers said criminals may also look to steal expensive photographic equipment carried by drones, to knock out surveillance cameras used by law enforcement.

Intel said it expects to see dronejacking "toolkits" traded on "dark web" marketplaces in 2017. "Once these toolkits start making the rounds, it is just a matter of time before we see stories of hijacked drones showing up in the evening news," the report said.

Other predictions in the report included a decrease in so-called "ransomware" attacks as defenses improve, but a rise in mobile attacks that enable cyber thieves to steal bank account or credit card information.

The report also noted that cybercriminals will begin using more sophisticated artificial intelligence or "machine learning" techniques and employ fake online ads.

Source: AFP.

Source: I-Net Bridge

For more than two decades, I-Net Bridge has been one of South Africa’s preferred electronic providers of innovative solutions, data of the highest calibre, reliable platforms and excellent supporting systems. Our products include workstations, web applications and data feeds packaged with in-depth news and powerful analytical tools empowering clients to make meaningful decisions.

We pride ourselves on our wide variety of in-house skills, encompassing multiple platforms and applications. These skills enable us to not only function as a first class facility, but also design, implement and support all our client needs at a level that confirms I-Net Bridge a leader in its field.

Go to: http://www.inet.co.za