Wyze h@ck3rs via app, anyone?

Problems ended after removal of Wyze app.

Without you giving any useful information, we can’t give much of an answer.
What was happening that gave you the impression of hackers?

4 Likes

I’ve already spoken to a cyber security specialist who had advised me to uninstall the app. among other things. Just wanted to know if anyone else has gone through this. My phone’s battery would always drain out in a matter of 2 to 3 hours without much usage on my end, it would always overheat to the point where I could no longer hold the phone in my hand, a whopping 45 gigs of data was generated in only 30 days, which is extremely unheard-of for me as I only average roughly 2 gigs a month, apps on my phone mysteriously open and close before my eyes, event logs labeled “person” would completely disappear for about 15 minutes or more, then reappear, patches of playback deleted on one of the 4 cameras on the same network. I’ve kept a diary of my experiencing and have already reported it. I have since uninstalled the app. Was a customer for about 2 years and used to love their products and would always recommend Wyze as a good camera security system to who ever wanted to know. I am now very disappointed as a customer. I never had a problem with the actual cameras, just the app.

I think it would be very well known if the WYZE app was doing any of that.
Android or Apple?

6 Likes

It may not be happening to all of their customers, just a select few who may not be aware. Who knows, as Wyze may not even be aware that there may be rogue elements operating within their organization. Android

Rogue elements doing what? What did they gain by the anomalies you describe?

2 Likes

How could anyone not be aware of their battery going dead in 2-3 hours and using 45 Gb of data in a month?

2 Likes

I have absolutely no idea. But, there is such a thing as people being hacked without their knowledge in today’s world. Glad I took screen shots.

Recomend using a password manager like Keeper, LastPass, etc. Change all your passwords to a secure type with at least 14 characters made up of numbers, letters (small / large) and characters.

Especially the password and access code for your phone.
Have you used your phone on an unencrypted WiFi network?

2 Likes

Thank you and yes, last I checked the protocol used was WPA2.

That is something we absolutely take seriously. Any chance you sent in logs that we can check before you uninstalled the app? If so, may I please have the log number?

And did you use our security report submission tool for this by any chance? While this doesn’t really sound like what I would expect from a hacking event, we’d still like to look into this and figure out what was going on.

11 Likes

After reading your recent posts in several threads, it sure sounds like you have a RAT on your phone.

Someone remotely streaming your Wyze feeds would certainly burn up the 45 GB of data over a month, but all the other phone weirdness you describe sounds like a remote control infection.

Could be a result of social engineering, or your phone falling victim to an Evil Twin while using an unsecured public WiFi, or similar, etc.

If it were me, I’d copy off any data you have to save, factory reset that phone ASAP, then start changing every password you have.

In other words, watching your Wyze app feeds was the hackers payoff, but not necessarily the way they got into your phone.

https://www.google.com/search?q=AndroRAT

9 Likes

I second @sodcam’s opinion & suggestion. (hate those dirty rats!)

Maybe. There is certainly something up with his or her phone but it’s not clear it’s been “hacked”. The primary complaint centers around something that makes no sense - how would someone be making events disappear AND then restoring them later in the Wyze app? Even the phone owner can’t do that. Although I suppose they could be moving the files around that comprise that event data.

2 Likes

Well don’t know myself.
If you wanted information from someone, say some Chinese who wanted information from a government employee then you sure wouldn’t want to be obvious about it. It would be more of a stealth objective, not heating up the battery and only selecting certain data that would be yield good intelligence w/min data transfer.

If you’re just hacking to play with someone then maybe heat up the battery and share the files with others in a group.

Look up the these file attributes
+O Offline The file data is physically moved to offline storage
+H Hide the file
+P Sparse
+X No Scrub / SuperUser

“Just because you’re paranoid doesn’t mean they aren’t after you.” ― Joseph Heller, Catch
So what did you say is your IMEI number?

1 Like

Huh? Those are NTFS attributes. Neither Android nor iOS uses them?

Well you’ll probably need root access but yes, all the OS are about the same (to me). Android devices were developed on Linux, which is based on UNIX. iOS uses the Unix commands and Win10 is moving in that direction as well.

Go to your DCIM folder (Digital Camera IMages) and rename an image to start with a period. It will disappear. Its the hidden attrbute just as in Linux. Its just easier to say +H instead of .dotfile

Android phones have 6 partitions: devices: boot, system, recovery, data, cache, misc. and uses many of the same kernelspace utilities as Linux.

2 Likes

Google just removed about dozen apps from the play store that were harvesting data. Without a doubt it was not the Wyze app. You should have been able to see what app was using the battery and data

4 Likes

I describe my experience exactly as it happened, nothing more nothing less. So, I don’t know what else to say about it and unfortunately my schedule doesn’t allow me to commit too much time to this. I contacted customer service and was connected to a very kind representative by the name of Ryan in the Philippines. I explained the problem I was having with the app and to my surprise he understood the issue and thanked me for giving him this information and assured me that someone would be contacting me shortly. Still haven’t heard back and that was almost 2 weeks ago. Although I’ve had some IT experience, I’m not an expert and don’t know enough to swiftly arrive at a conclusion. I do know, however, that the advancements in technology are growing exponentially as programmers & hackers become more creative & innovative. So, who knows what’s really going on, especially in these times. I will try back once again and if nothing pans out, I’ll just have to use another system. Thanks

It’s odd that the app only hacked you though. Ah well, at least you found it.

1 Like