Police Body Cameras Infected with Conficker Worm

Conficker is a computer worm targeting the Microsoft Windows operating system that was first detected in November 2008. It uses flaws in Windows OS software and dictionary attacks on administrator passwords to propagate while forming a botnet, and has been unusually difficult to counter because of its combined use of many advanced malware techniques. The Conficker worm infected millions of computers including government, business and home computers in over 190 countries, making it the largest known computer worm infection.

iPower Technologies, a Boca Raton based network integrator, discovered the a security vulnerability in the Martel Frontline Camera with GPS which is sold and marketed as a body camera for official police department use.  iPower is currently working to develop a cloud based video storage system for government agencies and police departments to store and search camera video.

The video below shows a test computer that is clean, with wireshark running, before attaching the body camera to after attaching the camera and infection taking place. You can see it start scanning the local network, looking for more victims to attack.

The question is, how does a fresh, out of the box, body camera, come complete with a worm from 7 years ago? It had to be infected during manufacturing.

This entry was posted in Security Blog and tagged , , , , , , , , , , , , , , , , . Bookmark the permalink.