main
Report a problem

Clickjackers could hijack Webcams, microphones, Adobe warns

Daniel Fleshbourne   on 08 October 2008 - 17:35 · 8 comments & 4505 views

Advertisement (Why?)
Adobe Systems warned users Tuesday that hackers could use recently-reported "clickjacking" attack tactics to secretly turn on a computer's microphone and Web camera. Flash on all platforms is susceptible to clickjacking attacks, Adobe said in an advisory posted Tuesday. By duping users into visiting a malicious Web site, hackers could hijack seemingly-innocent clicks that, in reality, would be used to grant the site access to the computer's Webcam and microphone without the user's knowledge.

"This potential 'Clickjacking' browser issue affects Adobe Flash Player 's microphone and camera access dialog," acknowledged David Lenoe, the company's security program manager, in a post to Adobe's security blog . Although a patch is not ready -- Lenoe said one would be issued by the end of October -- Adobe's advisory listed steps users can take immediately to block Webcam and microphone hijacking. Adobe recommended that users access Flash's Settings Manager using a browser to select the "Always deny" option.

View: The full story @ InfoWorld

Post a comment · Send to friend Comments · There are 8 additional comments
#1 +Shadrack on 08 Oct 2008 - 18:36
I know how to combat this. I'll just start using my computer naked. That will teach em to hi-jack my webcam!
#2 Ficman on 08 Oct 2008 - 20:03
(1 reply) #3 superkid on 08 Oct 2008 - 20:10
^ Rofl, bit scary though that they can turn on your webcam and see you! Simple solution though is to unplug the cam when your not using it could be annoying though.
#3.1 Glen on 08 Oct 2008 - 20:50
(superkid said @ #3)
^ Rofl, bit scary though that they can turn on your webcam and see you! Simple solution though is to unplug the cam when your not using it could be annoying though.


Not as simple as that when you have a laptop with a built-in web cam, but you can disable it in any case.
#4 medion on 08 Oct 2008 - 23:04
isn't there normally a led-indicator turned on when the webcam is turned on? Mine does....
#5 Rohdekill on 09 Oct 2008 - 02:42
simple solution, cover the camera unless you want to use it.

I always turn the camera and mute the mic when I'm done with them. I care less if someone can get to them.
#6 smooth_criminal1990 on 09 Oct 2008 - 08:23
I just use a flash blocker (except on Neowin, obviously )
#7 vanacid on 09 Oct 2008 - 16:25
If it is the same thing (proof of concept) than yesterday, it doesn't work.
I feel safe until someone puts a real proof of concept that works.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)