Security researcher Eaton Zviari discovered a vulnerability in the SmartTub system. In addition to providing access to the personal information of all owners, it allows you to remotely control hot tubs – adjust the temperature, change the filtration modes and water level. Accessing these features may damage someone else’s device. To confirm his words, the “white” hacker hacked the server part of the entire network and was able to control other people’s bathrooms.

Read more

• Researcher was able to access the name, surname and e-mail addresses of users from all over the world.
• He did this not to hurt anyone, but only to warn the software developer of the vulnerability.
• He first noticed a problem with SmartTub when he tried to log in as a user. While downloading, he briefly saw the admin panel on the screen. Then you had to “download the JS file and change a few lines”.
• The researcher also managed to hack the SmartTub app for Android by finding the URL in the APK file that gives access to the additional admin panel.

According to the programmer, he repeatedly tried to contact Jacuzzi to report the vulnerability, but was only asked to send more data, or even ignored. However, according to his observations, security vulnerabilities were fixed until June 2022.

Learn about other recent high-profile hacker attacks:

• Russian hackers terrorize Costa Rica: they want ransom and overthrow. The government does not plan to give up, despite huge financial losses.
• One of Mexico’s Foxconn facilities, which manufactures computers, LCD TVs, mobile devices, set-top boxes and other equipment, was also attacked.
• But a group from North Korea has created a virus that forces victims to help. We told him how it works.