HACKERS can hijack your smart speakers, unlock your doors and run up gas and electric bills at your home using laser pointers.
The terrifying attack uses a laser to control the speaker – like an Amazon Echo or Google home – instead of words.
By changing a laser's intensity to a certain frequency, researchers were able to trick the speaker into thinking it was hearing sound.
The laser would be pointed at the speaker's microphone, and interpret it as an audio command.
This lets hackers issue voice commands to your speakers, potentially at huge distances away.
"[It's] an attack that is capable of covertly injecting commands into voice-controllable systems at long distances," said the University of Michigan team in a research paper.
This would allow hackers to do anything you can normally do with a smart speaker.
Hackers could annoy you by playing loud music at night, or making phoney purchases on your account.
But the attacks can get more serious if you have an Alexa linked up to other smart home gadgets.
They could run up big gas or electricity bills using smart heating and lighting systems.
And users with smart door locking systems could be put at risk of burglaries.
Researchers were able to successfully open a garage door using the hack.
The only requirement for the 'LightCommands' hack is a reasonably sophisticated laser set up, and direct line of sight to the speaker.
But this could easily be achieved for reasonably low cost, with lasers aimed through a clear window.
All of the necessary gear can cost well under £400, making the attack worryingly simple to put together.
"The laser current driver with analogue modulation port is the most specialised instrument in the attacker's setup," researchers explained.
"We used the scientific-grade laser drivers that cost about $1,500 (£1,160).
"However, there are cheaper alternatives such as the Wavelength Electronics LD5CHA current driver available at a cost of about $300 (£230)."
What is Alexa?
If you've never heard of Alexa, here's what you need to know...
- Alexa is an "intelligent" personal assistant built by Amazon.
- You can find her on several different devices, including Amazon's Echo speakers.
- Alexa responds to voice commands, and can talk back to you.
- She can perform thousands of different tasks, including telling you about the news or weather.
- But she can do more complex things too, like ordering a pizza or arranging an Uber taxi pick-up.
- To activate Alexa, you need to say "Alexa" to an Amazon Echo speaker.
- Alexa currently only works in English and German languages.
- Because she's powered by artificial intelligence, Alexa is constantly getting smarter.
- Alexa will also get more used to your voice, and better understand what you want her to do over time.
And the laser itself was bought online for around $18 (£14), the researchers said.
One way of spotting the attack is to look out for laser light on your speaker.
But that won't always work: scientists were also able to execute the hack using invisible lasers.
The experiment worked with infrared laser light that can't be seen by human eyes.
In a statement given to The Sun, an Amazon spokesperson said: "Customer trust is our top priority and we take customer security and the security of our products seriously.
"We are reviewing this research and continue to engage with the authors to understand more about their work."
A Google spokesperson told us: "We are closely reviewing this research paper.
"Protecting our users is paramount, and we're always looking at ways to improve the security of our devices."
MOST READ IN TECH
In other news, check out our guide to the best Alexa tips and tricks.
Amazon recently launched an Alexa ring and glasses, and even a smart oven.
We reveal why is Alexa flashing green, yellow or red.
And Amazon's smart speakers are being commandeered by randy users as part of their kinky sex games.
Do you trust your smart speaker? Let us know in the comments!
We pay for your stories! Do you have a story for The Sun Online Tech & Science team? Email us at tech@the-sun.co.uk