Real or Fake? Spy chips in Chinese Clothes Iron - Page 1
Forum section: electronics / general

author: chicken
author_rank: Frequent Contributor
timestamp: October 29, 2013, 04:20:27 pm
content: A Russian news agency reports that cyber criminals are planting chips in electric irons and kettles to launch spam attackshttp://www.bbc.co.uk/news/blogs-news-from-elsewhere-24707337http://www.rosbalt.ru/piter/2013/10/22/1190990.htmlIMO not very credible.. but now I've to get out the screw drivers. Maybe I can salvage a usable WiFi module from my $13.99 Target iron!

author: c4757p
author_rank: Super Contributor
timestamp: October 29, 2013, 04:28:05 pm
content: QuoteForget the WiFi module, I'm more interested in this new method of spreading viruses by microphone.Are we 100% sure they haven't fallen for an article from the Russian equivalent of The Onion?

author: dexters_lab
author_rank: Unknown
timestamp: October 29, 2013, 04:38:24 pm
content: saw that article on TheRegister as well, they seem to think it might be genuinehttp://www.theregister.co.uk/2013/10/29/dont_brew_that_cuppa_your_kettle_could_be_a_spambot/

author: NiHaoMike
author_rank: Super Contributor
timestamp: October 29, 2013, 04:54:34 pm
content: Use WPA with a good password (which you should if you're worried about security) and unauthorized devices would not be able to connect.I don't believe it even though it's possible since it's a lot of work. Much easier to install malware on some random USB device.

author: tehmeme
author_rank: Regular Contributor
timestamp: October 29, 2013, 05:04:56 pm
content: Some possible propaganda from a competing Russian iron manufacturer? or the some key people didn't get their cut?Or is this another one of those lost in translation storm in a tea cup piecesSo many questions.Of all the appliances, why an iron, and a cheap one at that? why not office equipment, stationary or peripherals, that would at least have a better chance of being in the vicinity of a useful signal. (edit: and would be less suspicious under an x-ray or physical inspection, the majority of irons are very sparse inside)Irons would only be plugged for short periods so this thing would need to have a backup power source (take your pick).Unless this shipment was targeted at specific consignees, returns whether financial or information cost of doing this would make this non-profitable.hmm..edit 2:also as NiHaoMike brings up the USB, peripherals could bypass the wifi security via the pc, or on printers, copiers & phones the user will enter the network credentials into the device as part of the setup.

author: pickle9000
author_rank: Super Contributor
timestamp: October 29, 2013, 05:28:30 pm
content: I think rigging a keyboard would be a better idea, record keystrokes for a couple days then connect to a wifi to send them home (not via the pc).

author: tehmeme
author_rank: Regular Contributor
timestamp: October 29, 2013, 06:43:04 pm
content: Quote from: pickle9000 on October 29, 2013, 05:28:30 pmthis would only work if the wifi wasn't properly secured, again, making it extremely mission specific.

author: Smokey
author_rank: Super Contributor
timestamp: October 29, 2013, 08:54:21 pm
content: Quote from: c4757p on October 29, 2013, 04:28:05 pmI just smashed every microphone I could think of in my house. I think I'm safe. It does make phone calls more difficult though. Good thing I printed out that Morse Code chart.

author: tehmeme
author_rank: Regular Contributor
timestamp: October 29, 2013, 09:05:22 pm
content: Quote from: Smokey on October 29, 2013, 08:54:21 pm

author: c4757p
author_rank: Super Contributor
timestamp: October 29, 2013, 09:10:06 pm
content: Quote from: Smokey on October 29, 2013, 08:54:21 pmWay overkill, dude! I just got my flu shot yesterday, so I'm good

author: John Coloccia
author_rank: Super Contributor
timestamp: October 29, 2013, 09:14:46 pm
content: Why not just bury them in the code for WiFi routers and things like that? They're all made in China.Who buys clothes irons anymore, anyway? That's like Little House on the Prairie. Isn't everything wash and wear now? Why not embed chips in 8-track players too.

author: tehmeme
author_rank: Regular Contributor
timestamp: October 29, 2013, 09:30:49 pm
content: Quote from: John Coloccia on October 29, 2013, 09:14:46 pmA very good point!Quoteuhmm...I love my freshly ironed shirts on those dark grim British mornings,I bought this 2 months ago...http://www.currys.co.uk/gbuk/home-appliances/ironing/irons/philips-azur-gc4860-02-steam-iron-blue-10016198-pdt.htmlThat and my coffee maker were cheaper ways of coping with the British weather than moving to warmer climes.

author: dexters_lab
author_rank: Unknown
timestamp: October 29, 2013, 09:58:52 pm
content: I am 40 in a few months, i could probably count the number of times i have ironed on two hands... Just dont see the point, its a terrible waste of time and many kWs... imo

author: tehmeme
author_rank: Regular Contributor
timestamp: October 29, 2013, 11:03:07 pm
content: Quote from: dexters_lab on October 29, 2013, 09:58:52 pmYou're obviously doing it wrong

author: Hardcorefs
author_rank: Regular Contributor
timestamp: October 30, 2013, 01:01:51 am
content: Obviously Chinese women do a lot more ironing than the rest of the world.After buying an Iron 7 years ago.. it has not been used since.

author: Dago
author_rank: Frequent Contributor
timestamp: October 30, 2013, 11:38:42 am
content: Installing a spy chip on a device that's hidden in a closet without power for 99.9% of the time seems like a good choice.

author: dexters_lab
author_rank: Unknown
timestamp: October 30, 2013, 11:49:24 am
content: well the chinese have never been known for putting much thought into their final designs!

author: SeanB
author_rank: Super Contributor
timestamp: October 30, 2013, 06:22:31 pm
content: I still have the clothes iron I bought in 1987, and it still works. Did a lot of work ironing military uniforms over the years, and even did beds......

author: JohnnyGringo
author_rank: Regular Contributor
timestamp: October 30, 2013, 11:18:46 pm
content: Maybe it's a spy chip aimed at all the hobbyists who use "Toner Transfer for PCB Making".

author: Mr Pig
author_rank: Contributor
timestamp: October 31, 2013, 06:51:39 pm
content: Putting the devices in low-cost appliances would reduce the financial hit should a shipment be intercepted and rejected. Also, as the appliances would most likely be discarded and replaced when faulty, rather than being opened up for repair, there is less chance the device will be discovered.Just pondering on why one might choose such an apparently dumb conveyance.

author: NiHaoMike
author_rank: Super Contributor
timestamp: October 31, 2013, 07:34:50 pm
content: Why bother when you can just load malware onto random USB drives? That actually has happened several times in the past, though disabling autoplay defeats it.

author: Mr Pig
author_rank: Contributor
timestamp: October 31, 2013, 10:23:44 pm
content: High-current devices like irons and kettles may have been chosen disguise the additional power consumption of the spy device during quality-control or import checks. Or maybe whoever wanted to do this just happened to have a bent friend with a kettle factory!And it may not have been about collecting intelligence at all. It could be a plot by an individual or gang intending to blackmail the victims using the recordings. All pretty mad but it does prove one thing.you really,reallycan't trust the Chinese!

author: chicken
author_rank: Frequent Contributor
timestamp: November 01, 2013, 01:16:00 pm
content: Quote from: c4757p on October 29, 2013, 04:28:05 pmWell, here you go:http://arstechnica.com/security/2013/10/meet-badbios-the-mysterious-mac-and-pc-malware-that-jumps-airgaps/

author: mrflibble
author_rank: Super Contributor
timestamp: November 01, 2013, 01:27:37 pm
content: The problem with the last article is that it's more anecdotal than verified hard evidence. BUT, it does make for a cool story.

author: amyk
author_rank: Super Contributor
timestamp: November 01, 2013, 01:37:29 pm
content: I think neither that one nor this one is true at all... Halloween tends to bring out these sorts of pranks.

author: chicken
author_rank: Frequent Contributor
timestamp: November 01, 2013, 01:37:55 pm
content: Quote from: mrflibble on November 01, 2013, 01:27:37 pmI know, smells a bit like a "cold fusion" moment for security researchers. But with all that NSA brouhaha my tinfoil hat starts to wear thin.