VIDEO: Drones Infected with Malware, Can Drop from the Sky or Be Hijacked for Surveillance

You’re Minding your Own Business, When Something in the Sky Snags your Attention. Is it a Bird or a Plane ? Nope, it’s a Drone Falling Out of the Sky because, it’s Infected with Malware. Yeppers, “you read that right”, Wrote Security Engineer, Rahul Sasi, regarding the Title of his Post Describing “Maldrone — the first backdoor for drones”. Although he Shows Off the Malware by Infecting a Parrot AR.Drone within Wireless Range, Making it “drop like a brick”, Theoretically an Attacker could also Take Control of any Drone with an ARM Processor and Linux-Based Operating System and then Use it for Surveillance. Peachy. Sashi Plans to Present “Drone Attacks: How I hijacked a drone” on February 6 at Nullcon in India. “Once my program kills the actual drone controllers, it causes the motors to stop and the drone falls off like a brick”, Sasi Said. “But, my backdoor instantly takes control so, if the drone is really high in the air the motors can start again and Maldrone can prevent it from crashing.” Sasi Suggested SkyJack and Maldrone Could be Good Buddies. The Difference is that “SkyJack is an exploit” for the Parrot AR Drone and “Maldrone is the payload”. So, Once you Exploit a Vulnerability to Hack a Drone, that’s When you “install Maldrone as a backdoor”. He Added that, his “backdoor kills the autopilot and takes control”. Oh and the Maldrone “backdoor is persistent across resets”, Meaning that, Resetting the Drone to Factory Defaults Won't Remove the Malware Infection.


The Only Way to Get Rid of the Backdoor, according to Sasi, is to Reinstall the Drone’s Original Software. Sasi’s Backdoor Can be Silently Installed on the “drone remotely, over a wireless connection, without the operator knowing. Once in place, an attacker can take control of the drone, perform remote surveillance using the drone's video camera and possibly even spread itself to other drones, too”. A Drone Infected with Maldrone Can “intercept and modify data on the fly”. It Can also Connect to a “botserver and make it available for a botmaster”. It Certainly Sounds Alarming that a Botmaster Can Remotely Take Away Control from the Drone Owner and then Use that Drone for Something Sinister like Remote Surveillance. It Really Makes you Think When you Consider that Sasi Added, “There are over 70 nations building remotely controllable drones. Most of these drones are capable of making autonomous decisions”. Sasi is Interested in Making his Malware Generic Enough that, it Could be "cross-compatible with other drones" ; he’s also Working on Infecting a DJI Phantom. It's Not the 1st Time a Drone has been Infected as James Halliday ("Substack") Created a “virus-copter”. He Managed to Take 1st Place in the 2012 Drone Games Held in San Francisco after he “wrote an insane virus that infects AR Drones, which then infect other AR Drones and causes them all to be p0wned and run amok”. Also in 2012, for Larger-Scale Drones, Researchers Warned that, Civilian Drones were Vulnerable to Hackers, Could be Hijacked and Used as Missiles. In 2013, Security Researcher, Samy Kamkar, Came Up with SkyJack, “a drone engineered to autonomously seek out, hack and wirelessly take over other drones within Wi-Fi distance, creating an army of zombie drones under your control”.


Last Month at Code Blue Cybersecurity Conference in Tokyo, Dongcheol Hong, Hacker and CTO at SEWORKS Mobile Security Company, Demonstrated “how to ultimately compromise a drone by using drone's convenient features”. He Added, “My malware, also known as HSDrone, enables itself to spread from one device to another and takes over privileges to compromise and control them”. That Bit of News Flew Completely Under my Radar, the Same as the 2-Pound, 2-Foot Drone Flew Under a White House Radar System, Crashed into a Tree on the South Lawn and Caused a Lockdown. The National Geospatial-Intelligence Agency Employee’s Drunk Flying of a DJI Phantom 2 Quadcopter Prompted President Obama to Call for More Regulations. “The drone that landed in the White House you buy in Radio Shack", he Said before Referencing Amazon’s Desire to Use Small Drones to Deliver Packages in about 30 Minutes. Hopefully Amazon would Use a Quadcopter Manufacturer that Applied Security so that, the Software Couldn't be Replaced or Infected with Maldrone. After its Drone Breached White House Security, DJI, Who Makes the Quadcopter Said, it Plans to Release a Mandatory Firmware Update that, will Disable its Devices from Flying within 15.5 Miles in All Directions from the Center of Washington DC; this Serves as an Extension of DJI’s No Fly Zone System, which Uses the Drone’s GPS Location, to Prohibit Flight Near 10,000 Airports, “sensitive locations and to prevent flight across national borders”.




Info Source:

https://www.youtube.com/watch?v=5SlWdl4ZuAI