This archive report was first published on 12 August 2019.
As more devices become dependent on internet connectivity, the threat of cyberattacks grows. This is particularly concerning for professional photographers who rely on Canon DSLR cameras, renowned for their high-quality images.
According to a report by Check Point Software Technologies, a vulnerability in the Picture Transfer Protocol (PTP) could leave people's cameras exposed to ransomware attacks. The PTP is a standardized method for transferring images between devices, including digital cameras with built-in Wi-Fi.
Check Point researcher Eyal Itkin discovered that the PTP could be exploited to remotely install ransomware onto a DSLR camera. In a video detailing the vulnerability, Itkin demonstrates how he was able to exploit a Canon EOS 80D over Wi-Fi and encrypt the images on the SD card, making them inaccessible to the user.
Itkin notes that cameras could be a particularly juicy target for hackers, as they often contain personal images that users may not want to lose. In a genuine ransomware attack, hackers typically demand a small amount of money in exchange for the key to decrypt the files.
Check Point has been working with Canon to address the vulnerability, and the Japanese firm has issued a warning to camera owners not to use unsecured Wi-Fi networks. Canon also advises owners to update and install the latest security patch.
While Check Point did not reveal whether other manufacturers are also vulnerable, they advise all users to avoid connecting to unsecured Wi-Fi networks, regardless of the device being used.
