Receiving fake push notifications (text messages) to my phone from 'fake' devices - Wyze server hacked?

Services & Integrations
, ,
1

I have had four Wyze cameras (V2, V3, two outdoor cams) for several years. I have CamPlus Pro on the outside cams as well. Everything has been fine for years, when I have motion detect on I receive the push notifications on my phone via text message, etc.

Something changed yesterday morning (4/19/22) - I started receiving fake notifications, I received a notification in the usual ‘Wyze’ format “Motion detection on Front Door Cam April 19, 2022 at 03:51AM.” The problem is, I don’t have a ‘Front Door Cam’. Then I started received all sorts of ‘…Driveway Cam…’ ‘…Front Port Cam…’ ‘…Living Room Cam…’ when I don’t have any of those cams, and none of my cameras are named that.

So far I’ve gotten 60+ notifications in the last 24 hours (crazy!). These are all texted to my iPhone, and the ‘from’ number is the phone number I’ve always (and still do) get Wyze push notifications on.

I know people can ‘spoof’ the number that a phone call or text message appears to come from, but the fact that these spoofed texts are going to my phone number tells me that the info came out of Wyze somehow.

Anybody else get this?

2

Wyze doesn’t send notifications via text messages. How are you receiving text notifications from a Wyze phone number?

1 Like
3

Are you getting texts or push notifications? Wyze doesn’t send texts except for the verification code as far as I know. It’s very likely you’re just being spammed, and probably has nothing to do with wyze.

1 Like
4

Yes they do. If you have Cam Plus Pro, it does the push notification as well as SMS text messages. See the article below.

Your question did make me look into this more, so now I’m sure it is a Cam Plus Pro thing. Yeah, been hacked, but on the Wyze side.

1 Like
5

Yes they do. If you have Cam Plus Pro, it does the push notification as well as SMS text messages. See the article below.

1 Like
6

Thank you for the link! :+1: I’m not familiar with Cam Plus Pro, but I assume you have to assign your notification/SMS cams under the Monitoring tab. If you ever changed the cam names, locations, cam types, etc., you may need to recheck and reset those settings. If you’ve never changed cam names, etc., there may be a Wyze server issue.

Regardless, you should contact Wyze Customer Support to report your issues:

If you don’t get resolve from Customer Support, please post the ticket number they provide.

1 Like
7

I’ve changed my tune - I admit I have mistakenly blamed Wyze and the Cam Plus Pro!!!

Further digging into my home automation accounts (Wyze, IFTTT, Apillio, etc - kinda turning into a nightmare) I found out that it wasn’t the Cam Plus Pro thing, I had set up an IFTTT to send an SMS text message when Wyze motion was detected.

I believe I have been hacked (somehow), but on the IFTTT side. I’ve changed my passwords, plus disabled the IFTTT recipe that caused those text messages.

The ‘Wyze motion’ IFTTT formula for the trigger I was using was not an official Wyze one, but one somebody made a couple years ago. I suspect somebody figured out a back door into that IFTTT trigger block - may be a bunch of people who got the identical triggers that I had!

Thanks for your skepticism and the sanity check it made me perform!

2 Likes
8

No problem and thank you for replying back! :smiley:

I also just read all the Cam Plus Pro articles. Wyze (Cam Plus Pro) does not send SMS messages. When an alarm is triggered via CPP person detection, the app generates a device notification, but the only SMS generated is from the monitoring center, Noonlight.

2 Likes
9

Ahhh, yes, same as @Seapup I’m not familiar with pro. I use standard cam plus. That’s a neat feature pro has! Thanks for the information!

2 Likes