Skip to main content

Mi-Cam baby monitors are easily hackable, so you may want to turn yours off

Hijacking of arbitrary miSafes Mi-Cam video baby monitors

You may depend upon your baby monitor to keep an eye on your precious little one, but a newly discovered vulnerability suggests that parents may not be the only ones watching their children. As per a warning from Austrian cybersecurity company SEC Consult, it would appear that the Mi-Cam baby monitor is susceptible to “multiple critical vulnerabilities which include unauthenticated access and hijacking of arbitrary video baby monitors.”

Recommended Videos

Around 50,000 folks are estimated to have Mi-Cams in their homes, and it would seem that any of them could fall prey to hackers. Ill-intentioned actors can allegedly hack into Mi-Cams and use them to spy on just about anything the cameras can see.

SEC Consult claims that it has tried to contact MiSafe, the company behind the Mi-Cam, to warn it against the potential vulnerabilities. Unfortunately, the security firm says that it has received no answer, and consequently, is urging customers to turn off the Mi-Cams in order to protect themselves.

In order to hack into the Mi-Cam, an attacker would simply need to set up a proxy server capable of intercepting and modifying an HTTP request between a smartphone and device. In this way, attackers would be able to check out Mi-Cam footage without ever entering a password on the device’s companion app. Moreover, SEC Consult claims that there are several APIs that helped them attain information on how to connect to the Mi-Cam cloud network and actually toy with the baby monitor.

As Johannes Greil, head of the SEC Consult Vulnerability Lab noted, “Information retrieved by this feature is sufficient to view and interact with all connected video baby monitors for the supplied [user ID].” Apparently, user IDs were also quite easy to guess.

In SEC Consult’s white-hat hacking efforts, they were able to completely automate the interception of content between the Mi-Cam and its cloud server, which made it easy to effectively set up a standing live-stream of video feeds.

Getting these (among other) issues resolved has proven to be a challenge, especially as it is not entirely clear as to who is responsible for Mi-Cams. While MiSafe is the actual creator of the device, QiWo Smartlink Technology seems to have the rights to the technology. Forbes reports that QiWo is indeed responsible for software updates, and that the company will be reaching out to the Securities Exchange Commission (SEC) in order to address security issues as soon as possible.

Luckily, it would appear that Mi-Cams are no longer in production, which means that you can no longer buy these faulty baby monitors. But if you’re one of the 50,000 or so individuals who already have one of these cameras, you’ll likely want to turn them off for the time being.

Lulu Chang
Fascinated by the effects of technology on human interaction, Lulu believes that if her parents can use your new app…
Samsung Memorial Day sale: The best washer, dryer, and refrigerator deals
Samsung front-load washer and dryer set in chapagne finish in a laundry room.

The Samsung Memorial Day sale is finally online, so now's the perfect time to make some upgrades in your home. The brand, which is known for making some of the best phones and best TVs, is also a reliable name in the world of appliances, including washer, dryers, and refrigerators. No matter your budget and the amount of space you have, something will surely catch your eye in this year's Memorial Days deals for Samsung appliances.

You can take a look at all the home appliances that are on sale for Memorial Day from Samsung through the link below, but we've also highlighted our recommendations below if you want to finish your purchase quickly. That's actually a good idea, because we're not sure how much longer stocks will remain available. You shouldn't wait until the last minute of these Samsung Memorial Day deals before you proceed with your transaction, as you'll be in danger of missing out.

Read more
How to use the robotic arm of the Roborock Saros Z70
The Saros Z70 picking up a sock.

While the Roborock Saros Z70 didn’t exactly live up to the hype, there’s no denying its robotic arm is still a cool piece of technology. Capable of picking up small objects in its path, moving them to a new location, then continuing its cleaning process, the Saros Z70 and its robotic arm might be the coolest feature we’ve ever seen in a robot vacuum. But how exactly does it work? And what are the robotic arm’s limitations?

Here’s a closer look at how to use the robotic arm of the Roborock Saros Z70 and ways you can improve its performance.
Limitations of the Roborock Saros Z70’s robotic arm

Read more
The new Blink Video Doorbell offers two-year battery life, person detection
Close up of Blink Video Doorbell

The Blink Video Doorbell is a popular choice for frugal shoppers, and its next-generation successor is looking to follow in its footsteps. Available today, the new Blink Video Doorbell offers a remarkable two-year battery life, an improved field of view, a reworked design, and the low price of just $70.

If you’ve ever been shopping for an affordable video doorbell, you’ve probably stumbled upon the old Blink Video Doorbell. Available for just $60, it was a great alternative to premium devices from Nest and Ring. Blink is looking to build on that success with the new Video Doorbell. Its price has crept up $10, but it also picked up some nice new features. The biggest improvement is its field of view -- it’s been enhanced to a 150-degree head-to-toe perspective, compared to the 135-degree horizontal view of its predecessor.

Read more