ZIENA parliamentary audit of agencies under the Ministry of Science and ICT was conducted on the 10th.
Emphasizes personal caution regarding Chinese router security risks... avoid scanning QR codes from unclear sources.
ZIEN, an XIoT convergence security company, demonstrated various hacking scenarios using Chinese WiFi routers and malicious QR codes (QR phishing) during the ICT parliamentary audit of agencies under the Ministry of Science and ICT, showcasing the entire process of hacking attacks.
A ZIEN representative demonstrated how to hack Chinese WiFi routers to modify configuration settings and lure users to malicious webpages that mimic phishing sites. The malicious webpage was designed to look identical to legitimate websites and implemented scenarios to steal personal information including user IDs, passwords, payment information and more.
They also revealed the QR phishing attack process. By attaching malicious QR codes to shared electric scooters, scanning the code would download malicious applications to smartphones. They demonstrated scenarios where these apps request personal and payment information, which could potentially result in financial losses for users.
On the 10th, ICT-related parliamentary audits were conducted at the National Assembly in Yeouido, Seoul, involving agencies under the Ministry of Science and ICT including NIPA, KISA, and KCA. The audit discussed the serious security concerns associated with low-cost Chinese IT devices.
Recent concerns have been raised about security vulnerabilities in Chinese wireless routers and IP cameras. The Assembly noted that Chinese wireless router vulnerabilities can be exploited within 5 seconds just by knowing the IP address, expressing serious concerns that even accessing domestic portal sites through these routers could redirect to malicious websites.
Another issue raised was that connecting to WiFi through hacked routers could lead to information leaks from connected devices. Attackers can use hacking programs to view information on devices, potentially leading to theft of personal assets when accessing financial sites.
Meanwhile, ZIEN, an IoT firmware security automatic inspection solution company, previously launched the beta service of 'Z-IoT', their IoT device security automatic inspection solution. This solution automatically inspects IoT device firmware to accurately identify vulnerabilities and provide security enhancement solutions. They also presented their black box hacking research results at the 'DEF CON 32' global hacking conference's IoT section in Las Vegas.
A ZIEN representative advised, "When purchasing products, security should be considered as an important criterion alongside price and performance," and emphasized, "Caution is necessary when scanning QR codes from unclear sources."
Source : Issue & Biz