{"id":1410,"date":"2017-10-16T23:28:02","date_gmt":"2017-10-17T06:28:02","guid":{"rendered":"http:\/\/draculascastle.com\/wordpress\/?p=1410"},"modified":"2017-10-16T23:28:27","modified_gmt":"2017-10-17T06:28:27","slug":"do-you-really-need-to-cover-your-laptop-camera","status":"publish","type":"post","link":"https:\/\/draculascastle.com\/wordpress\/?p=1410","title":{"rendered":"Do you really need to cover your laptop camera?"},"content":{"rendered":"
\n
Do you really need to cover the camera on your laptop?<\/span><\/span><\/a><\/div>\n<\/div>\n
<\/div>\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\"Aleksandar<\/a><\/span><\/span><\/div>\n<\/div>\n<\/div>\n
\n
\n
Aleksandar Puharic<\/a><\/span><\/span>, Just an IT guy<\/span><\/span><\/div>\n
\n
Updated Dec 26 2016<\/span><\/a><\/span><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
<\/div>\n

My fianc\u00e9e is really paranoid about this matter. Since I met her for first time, she was always covering her camera. I was always laughing at her\u2026.<\/p>\n

One evening, my fianc\u00e9e and I were watching a movie on her laptop, when we noticed that the camera LED occasionally turns on and then off.
\nAt first, we didn\u2019t suspected anything, but after two more blinks, I suspected that something was going on.<\/p>\n

I immediately opened task manager and found out a few processes with strange names running. I wasn\u2019t able to terminate them.<\/p>\n

Then I analyzed output traffic with netstat and found out that one IP was showing over and over again and it wasn\u2019t local IP address.
\nI also noticed that IP was always connected on port 1234.<\/p>\n

I traced the IP address back to a city where one of my \u201cfriends\u201d lived. I couldn\u2019t get the exact address, nor street, but the city name was enough as I had only one \u201cfriend\u201d there.<\/p>\n

The friend I spoke to over Skype several hours ago that very same day and he sent me one of his programming projects (.exe file) and I naively ran it. It didn\u2019t work, nothing happened. I hadn\u2019t suspected anything as I trusted him back then.<\/p>\n

When I saw that a lot of output traffic was going to a computer in the city where he lived I knew that the exe file I naively ran wasn\u2019t just a dumb program which didn\u2019t work, but something much worse. I cleaned it immediately.<\/p>\n

RAT (Remote Administration Tool)<\/a><\/span> – Or in this case malicious RAT, or trojan horse. He gave me a trojan; I infected myself; he enjoyed control, himself.<\/p>\n

When I asked him about it on Skype, he sent me an evil grin and several photos of my fianc\u00e9e and me staring in front of the laptop.<\/p>\n

About him: <\/b>It was a guy I never meet in RL, we meet on Facebook, and we were cooperating for a long time. I\u2019m a programmer; he was a younger wannabe hacker\/programmer, so after a while he decided to abuse our friendship using a tool someone else made.<\/p>\n

Conclusion:<\/b> Covering the camera isn\u2019t necessary, but very good practice, as you never know who may be watching you. Worst thing is the false sense of security you may have, as I had, thinking that decent antivirus and knowledge will protect you from anything. However there are a lot of FUD crypters around, which any amateurs could use to encrypt his exe and make it undetectable for a while (until Antivirus corporations find out unique signature and put it in their virus definition databases).<\/p>\n

Advice:<\/b><\/p>\n