Lesson from the Bezos phone hack: Anyone can be a target

AP|
Are you vulnerable to cyber hack?
1/7

Are you vulnerable to cyber hack?

You may not think you're in the same league as Jeff Bezos when it comes to being a hacking target. Probably not, but you _ and just about anyone else, potentially including senior US government figures _ could still be vulnerable to an attack similar to one the Amazon founder and Washington Post owner apparently experienced.

AP
Story of Bezos' phone hack
2/7

Story of Bezos' phone hack

Two UN experts this week called for the US to investigate a likely hack of Bezos' phone that could have involved Saudi Arabian Crown Prince Mohammed bin Salman. A commissioned forensic report found with "medium to high confidence" that Bezos' iPhone X was compromised by a video MP4 file he received from the prince in May 2018. Bezos later went public about the hack after the National Enquirer tabloid threatened to publish Bezos' private photos if he didn't call off a private investigation into the hacking of his phone. It's not clear if those two events are related. The Saudis have denied any involvement in the purported hack.

Agencies
NSA does a check
3/7

NSA does a check

The events could potentially affect U.S.-Saudi relations. On Friday, Sen. Ron Wyden, an Oregon Democrat, said he is asking the National Security Agency to look into the security of White House officials who may have messaged the crown prince, particularly on personal devices. Jared Kushner, a White House aide, and President Donald Trump's son-in-law, is known to have done so using WhatsApp. Wyden called reports of the Bezos hack "extraordinarily ominous" and said they may have ``startling repercussions for national security.''

Agencies
A word of caution!
4/7

A word of caution!

But they could resonate at the personal level as well. As the cost of hacking falls while opportunities to dig into peoples' online lives multiply, more and more people are likely to end up as targets, even if they're not the richest individuals in the world. Ultimately, that boils down to a simple lesson: Be careful who you talk to _ and what you're using to chat with them. ``People need to get out of the mindset that nobody would hack them,'' said Katie Moussouris, founder and CEO of Luta Security. ``You don't have to be a specific target or a big fish to find yourself at the mercy of an opportunistic attacker.''

Getty Images
Is Facebook secure for online messaging?
5/7

Is Facebook secure for online messaging?

WhatsApp, owned by Facebook, is generally considered a secure way of trading private online messages due to the fact that it scrambles messages and calls with encryption so that only senders and recipients can understand them. What many people may not have realized is that it, like almost any messaging service, can act as a conduit for malware. That encryption, however, is no help if a trusted contact finds a way to use that connection to break into the phone's operating system. In fact, an infected attachment can't be detected by security software while it's encrypted, and apps like WhatsApp don't scan for malware even once files are decrypted.

Agencies
What should WhatsApp users do?
6/7

What should WhatsApp users do?

WhatsApp users can disable the automatic downloading of photos, videos and other media, which happens by default unless the user takes action.

Agencies
About Bezos phone hack case!
7/7

About Bezos phone hack case!

Prince Mohammed exchanged numbers with Bezos during a US trip in spring 2018. On the same visit, the prince also met with other tech executives, including the CEOs of Google, Apple and Palantir, as well as sports and entertainment celebrities and academic leaders. Virgin Group founder Richard Branson gave the Saudi delegation a tour of the Mojave Air and Space Port in the desert north of Los Angeles. UC Berkeley cybersecurity researcher Bill Marczak cautioned that there's still no conclusive evidence that the Saudi video was malicious, adding that it might be premature to jump to broader conclusions about it. Many other security experts have also questioned the forensics report upon which U.N. officials are basing their conclusions. Hackers-for-hire last year took advantage of a WhatsApp bug to remotely hijack dozens of phones and take control of their cameras and microphones without the user having to click anything to let them in.

Agencies

Other useful Links


Copyright © 2020 Bennett, Coleman & Co. Ltd. All rights reserved. For reprint rights: Times Syndication Service

X
User