Hack Exploits Google Street View to Find Victims

A security researcher has developed an attack which can be used for stalking, using JavaScript and geolocation information from Google to determine a victim’s location.

During a presentation at the BlackHat conference last week, titled “How I Met Your Girlfriend,” Samy Kamkar discussed the new method in detail. It works as follows:

1) the hacker lures the victim to a website which uses JavaScript to steal the router’s Media Access Control address and report the unique identifier to Kamkar

2) the hacker then puts the stolen MAC address into Google Location Services, which gives him an address accurate to a few hundred feet.

“Their web browser is compelling this exploit for you,” Kamkar said. “Pretty cool.”

The slides from the presentation are here

Share this story...Tweet about this on Twitter0Share on LinkedIn0Share on Facebook0Share on Google+0Email this to someone
Filed in: Cloud Tags: , , ,

You might like:

TechNavio Forecasts 37.96% Global Storage Service Market CAGR in 2015-2019 TechNavio Forecasts 37.96% Global Storage Service Market CAGR in 2015-2019
FireEye Integrates Threat Detect System into Samsung Knox; Manish Gupta Comments FireEye Integrates Threat Detect System into Samsung Knox; Manish Gupta Comments
MarketsandMarkets Forecasts IoT, M2M Comms Market to Reach $947B in 2019 MarketsandMarkets Forecasts IoT, M2M Comms Market to Reach $947B in 2019
Research and Markets: Internet-Based Apps to Drive Global Internet Security Market Through 2020 Research and Markets: Internet-Based Apps to Drive Global Internet Security Market Through 2020
© 2015 ExecutiveBiz. All rights reserved.