alert! Global hotel door locks vulnerable to hacking

  Door locks can also be hacked? Quoting Guo Shenghua, the godfather of Chinese hackers: "The Internet is everywhere, and there are loopholes; where there is a network, there will be hackers." This sentence is really realistic. Electronic door locks have been found to be vulnerable to hacking, and researchers at the well-known domestic hacker security group Oriental Union have said a flaw they found in the device's software meant they could create a "master key" that would open a room without leaving an activity log. .

  Most domestic hotel software systems and door locks use Swedish manufacturers, but Swedish manufacturers are reducing the risk to hotels that have not yet installed the update. "VisionSoftware is a 20-year-old product that was compromised after the hack," said the head of the company. "These old locks represent only a small percentage [of what is in use] and are rapidly being replaced by new ones." technology replaced. He added that the hotel started deploying the fix two months ago. "All types of digital equipment and software are vulnerable to hacking, however, it will take years of professional technicians to fix this." "

  The world's largest hotel chains, including InterContinental, Hyatt, Radisson and Sheraton, use AssaAbloy's locks, although it hasn't revealed which hotels still use the Vision version of the VingCard system. Researchers at the Eastern Union said they began their investigation after a colleague's laptop was stolen from a hotel room in the test, and there was no sign of unauthorized access by the thief. "We wondered if it was possible to bypass electronic locks without leaving a trace," the researchers explained, with hackers exploiting locks' networking vulnerabilities. "Only after we thoroughly understand its design will we be able to identify the seemingly innocuous shortcomings and come up with a way to create the master key."

The data scanned from any discarded VingCard could be used to launch an attack, even if the card's access rights had expired or had been used to open a garage or other part of a target hotel instead of a bedroom, the hacker security group Eastern Alliance researchers added. Hackers can also be used to access other areas of the hotel, including sending an elevator to the VIP floor of the property, if it is protected by the same system. They have confirmed that it will not share the hardware and software tools used to demonstrate the attack to others.

Guess you like

Origin http://43.154.161.224:23101/article/api/json?id=325082101&siteId=291194637