Can hackers get into your fridge?
A fridge keeping tabs on your groceries is useful. A hacker keeping tabs on your fridge is a different story. The growing use of internet-connected equipment has created new cybersecurity risks, even for devices once considered purely mechanical. Recently, hackers sabotaged refrigeration systems at hundreds of French supermarkets, exploiting equipment that can now be monitored and controlled remotely. From heating systems and security cameras to alarm networks and household appliances, more devices are connecting to the internet, creating potential entry points for cybercriminals.
Is your fridge hackable?
In theory, yes. Any refrigerator connected to the internet, directly or through an app, cloud service or home network, could potentially be hacked. In 2015, researchers demonstrated at a hacking conference in Las Vegas how a Samsung smart refrigerator could be compromised, allowing them to intercept some of the internet traffic passing through it. However, hackers may not necessarily want to control an appliance. Their objective could be to steal information, disrupt services or use the device to gain access to a larger network.
From smart locks to toothbrushes: What is vulnerable?
Potential targets include security cameras, video doorbells, alarm systems, smart locks, thermostats and central heating systems. Refrigerators, ovens and washing machines can also be vulnerable when connected to the wider internet. Even some toothbrushes now have internet connectivity. However, routers account for more than three-quarters of attacks on connected devices, according to security-industry data. As manufacturers add internet connectivity to products that once operated independently, the number of potential entry points for attackers continues to grow.
What can hackers do?
Once inside a device, hackers can gather information or take control of its functions. A compromised camera could reveal the inside of a home, while a device with a microphone could pick up sound. A hacked router could expose information travelling across the network. Attackers may also switch devices on or off, change settings or lock users out of their accounts. A compromised thermostat could affect heating, while a hacked refrigerator or freezer could have its temperature controls disrupted. Poorly secured devices may also allow hackers to access other systems on the same network or steal personal information linked to online accounts.
How far can hackers go?
Connected vehicles have also been found to have cybersecurity vulnerabilities. In 2015, researchers remotely took control of a moving Jeep through its internet-connected entertainment system. The incident led to a recall of about 1.4 million vehicles and the deployment of software fixes, Reuters reported. Nearly a decade later, researchers disclosed a flaw that allowed them to track, unlock and start certain Kia vehicles using only a licence plate number. They reported the vulnerabilities to Kia, which fixed them within months. There was no evidence that the flaws had been exploited in real-world attacks. Modern vehicles and aircraft have extensive safety and backup systems. Electricity and water networks also have multiple layers of security, monitoring and regulation that are generally absent from consumer devices. While critical infrastructure is not immune to cyber attacks, it is typically harder to target than a household appliance connected to Wi-Fi.
How can you protect your devices?
Cybersecurity experts recommend changing default passwords, enabling two-factor authentication wherever available and regularly installing software updates. Devices that no longer receive security updates should be removed or replaced. Consumers should also keep most devices on a local network and connect products to the wider internet only when there is a clear reason to do so. The simplest precaution is to limit the number of connected devices. The fewer potential entry points there are, the fewer opportunities attackers have to exploit them.
