Skip to main content

Mi-Cam baby monitors are easily hackable, so you may want to turn yours off

Hijacking of arbitrary miSafes Mi-Cam video baby monitors

You may depend upon your baby monitor to keep an eye on your precious little one, but a newly discovered vulnerability suggests that parents may not be the only ones watching their children. As per a warning from Austrian cybersecurity company SEC Consult, it would appear that the Mi-Cam baby monitor is susceptible to “multiple critical vulnerabilities which include unauthenticated access and hijacking of arbitrary video baby monitors.”

Around 50,000 folks are estimated to have Mi-Cams in their homes, and it would seem that any of them could fall prey to hackers. Ill-intentioned actors can allegedly hack into Mi-Cams and use them to spy on just about anything the cameras can see.

SEC Consult claims that it has tried to contact MiSafe, the company behind the Mi-Cam, to warn it against the potential vulnerabilities. Unfortunately, the security firm says that it has received no answer, and consequently, is urging customers to turn off the Mi-Cams in order to protect themselves.

In order to hack into the Mi-Cam, an attacker would simply need to set up a proxy server capable of intercepting and modifying an HTTP request between a smartphone and device. In this way, attackers would be able to check out Mi-Cam footage without ever entering a password on the device’s companion app. Moreover, SEC Consult claims that there are several APIs that helped them attain information on how to connect to the Mi-Cam cloud network and actually toy with the baby monitor.

As Johannes Greil, head of the SEC Consult Vulnerability Lab noted, “Information retrieved by this feature is sufficient to view and interact with all connected video baby monitors for the supplied [user ID].” Apparently, user IDs were also quite easy to guess.

In SEC Consult’s white-hat hacking efforts, they were able to completely automate the interception of content between the Mi-Cam and its cloud server, which made it easy to effectively set up a standing live-stream of video feeds.

Getting these (among other) issues resolved has proven to be a challenge, especially as it is not entirely clear as to who is responsible for Mi-Cams. While MiSafe is the actual creator of the device, QiWo Smartlink Technology seems to have the rights to the technology. Forbes reports that QiWo is indeed responsible for software updates, and that the company will be reaching out to the Securities Exchange Commission (SEC) in order to address security issues as soon as possible.

Luckily, it would appear that Mi-Cams are no longer in production, which means that you can no longer buy these faulty baby monitors. But if you’re one of the 50,000 or so individuals who already have one of these cameras, you’ll likely want to turn them off for the time being.

Lulu Chang
Former Digital Trends Contributor
Fascinated by the effects of technology on human interaction, Lulu believes that if her parents can use your new app…
Get this Roomba robot vacuum for $160 instead of the usual $275
iRobot Roomba 694 Robot Vacuum cleaning a foyer.

Crutchfield is currently selling an iRobot Roomba 694 robot vacuum for a fantastic discount. Usually costing $275, it’s down to just $160 for a very limited time only. One of the best robot vacuum deals around, the sale is only on until March 16 so you haven’t got long to snap one up. If you’re keen to streamline the cleaning process at home, check it out now before the sale ends.

Why you should buy the iRobot Roomba 694 robot vacuum
The Roomba range provides some of the best robot vacuums around meaning it’s the perfect brand to consider. With the iRobot Roomba 694, you get a 3-stage cleaning system with an edge-sweeping brush, dual roller brushes, and powerful suction. Alongside that, there are Dirt Detect sensors that inform it when it needs to give more attention to dirtier parts of your home.

Read more
The Blink Mini 2 features an updated design, support for outdoor use
The Blink Mini 2 placed on two books.

The original Blink Mini was one of the best indoor cameras thanks to its affordable price, 1080p resolution, and support for Alexa. Now, Amazon is making the gadget even more enticing with the new Blink Mini 2, which boasts a sleek new design and is capable of working both indoors and outside in the elements.

While it's still small and compact, the Blink Mini 2 looks slightly different from the old Blink Mini. Its corners are much softer, its entire chassis is white (instead of a white chassis and black faceplate), and its camera takes up a bit more space on the front of the device. The differences are apparent when the two gadgets are placed side by side -- and the minor changes add up to make the Blink Mini 2 look a bit more premium than its older sibling.

Read more
This 4-camera Lorex wireless video surveillence system is $200 off
A Lorex 2K Wireless camera mounted on an outside wall.

One of the best security camera deals today is over at Crutchfield with $200 off the Lorex 2K Wireless NVR System. Usually priced at $550, it’s down to a fantastic $350 until March 17. That means you don’t have very long to enjoy the significant discount. If you need to know more, we’re here to help with some insight about the security system below. Remember to buy it before March 17 if it sounds like the right setup for you.

Why you should buy the Lorex 2K Wireless NVR System
Sure to be one of the best home security camera systems for many people, the Lorex 2K Wireless NVR System is packed with features. It comes with an easy-to-use network video recorder along with four weather-resistant 2K cameras which are battery-powered and wireless. Any time the cameras notice motion, you’ll get a notification to your smartphone. You can then opt to view the live feed as well as talk to anyone on the other side. Its motion-based detection system does a great job of highlighting things only when there are people rather than objects, cutting down on false alarms.

Read more