Google Nest owners beware: users of the home security system are being targeted in a widespread sextortion scam, according to ComputerWeekly.
This is just another incident spreading fear about how secure these internet-connected devices really are - with scammers hacking into private systems, many homeowners no longer feel safe. Even Amazon fired four employees for accessing Ring user video data beyond the scope of what was necessary to perform their work duties.
The scam campaign was uncovered by Mimecast, a cyber security company. A deep dive revealed no less than 1,700 scam attempts sent to Google Nest users, mostly in the United States, early this January.
So how does this sextortion campaign work? The scammers contact a Google Nest user, claiming to have compromising footage of them. Then, they demand for a payout, which would hypothetically prevent them from releasing that footage.
However, this scam differs from most in that the scammers don't immediately tell their victims what they want. Instead, victims are sent a password to use to access an email account. In that account, they will find a email in which there's a link to a site that has very real and genuine footage downloaded from the Google Nest site. But the catch? It's not footage of the victim.
This serves as a type of warning. Victims are redirected to another email account, where they are told that footage from their Google Nest will be posted within a week if they don't pay up. The sum asked for? ComputerWeekly reports that, in one instance, the scammers demanded at least $550 in Bitcoin or gift cards redeemable at popular retailers like Target or Amazon.
Is the Google Nest sextortion scam a security breach?
To be perfectly clear, the Google Nest sextortion scam is not a security breach. Even though it's been proven that these internet-connected devices are susceptible to hackers, the scammers in this case are not actually hacking into Google Nest accounts.
Instead, they are preying on people by using the fear of a breach against them. That being said, it is still unclear as to how the scammers gained access to Google Nest users' email addresses.
How can I better protect myself?
Protecting yourself from scammers and hackers is becoming more and more important, especially as we start introducing smart home products into our private spaces. A big step in the right direction is educating yourself about the how hackers target their victims, staying up-to-date on the latest breaches and taking steps to protect your personal information.
We also recommend doing your research before you invest in a smart security system: check out our picks for best home security systems, best video doorbells, and best wireless security cameras.
However, one very easy step you can take right now is enabling two-factor authentication on your devices to better protect your accounts and your data. This will make it harder for hackers to gain access to your information.
You should also look out for signs that you may have been targeted: suspicious emails and log in and account information requests are common. When in doubt, contact the company that supports your device for clarification - in this day and age, there's no such thing as being too cautious.
