Forum Discussion

2012Coleman's avatar
2012Coleman
Explorer II
Apr 12, 2016

Security cameras sold online

Not trying to be an alarmist, but there are a lot of posts on security cameras in this forum. This morning, I came across this article:

Malware Found on Security Cameras Available Through Amazon

After purchasing the kit, the owner logged into the administrator panel to configure it. Upon investigation, they found that the device was talking to a server with hostname Brenz.pl, which is linked to malware distribution. If the device's firmware links to this domain, malware can be downloaded and installed, potentially leading to unlawful surveillance and data theft.

Something to watch for.

8 Replies

  • FWIW: Brenz.pl and the IP address are located in Poland. The TLD (Top Level Domain) PL stands for Poland.
  • When you buy one of those "cloud" type cameras that require no port forwarding, etc., you must accept the fact that it is hosted somewhere. You must use good password protection for your cameras or you'll have every yahoo in world looking at it. More than likely the IP address mentioned above is where this camera is hosted.
  • dcg9381 wrote:
    ...
    The chances of blocking on the specific file name of that PERL file are low.. ....
    Brenz.pl is not a PERL file, it is a server with an IP address of 148.81.111.121.
  • ramgunner wrote:
    One advantage of investing in a good router for your network, is that you can block outbound traffic to given sites. I use a security list from my employer and block known hacking/malware/compromised sites. Make sure that Brenz.pl is on your list too.


    What happens here, is that the camera gets installed in network, you access it from your PC, and you pick up the malware... Your PC isn't blocked from outbound calls.

    That is, the malware doesn't do *anything* on the camera itself, it's sitting there waiting for your PC.

    The chances of blocking on the specific file name of that PERL file are low.. Besides, it could simply be renamed something else.


    All in all, this is largely an issue to buy from known sellers - Amazon isn't always transparent about who is selling an item or displaying seller reputation.
  • One advantage of investing in a good router for your network, is that you can block outbound traffic to given sites. I use a security list from my employer and block known hacking/malware/compromised sites. Make sure that Brenz.pl is on your list too.
  • I remember reading about malware that was installed on laptops with webcams, and the webcams were able to be operated remotely. All the inter-connectivity has some drawbacks.
  • That is spooky. Despite the article many sold will probably stay in service.

About RV Must Haves

Have a product you cannot live without? Share it with the community!8,800 PostsLatest Activity: May 13, 2025