Jump directly to the content

HACKERS can hijack your smart speakers, unlock your doors and run up gas and electric bills at your home using laser pointers.

The terrifying attack uses a laser to control the speaker – like an Amazon Echo or Google home – instead of words.

 The attack requires line of sight, but powerful lasers bought cheaply online can travel over huge distances
4
The attack requires line of sight, but powerful lasers bought cheaply online can travel over huge distancesCredit: YouTube
 The attack can be used to unlock your smart-locked door
4
The attack can be used to unlock your smart-locked doorCredit: YouTube

By changing a laser's intensity to a certain frequency, researchers were able to trick the speaker into thinking it was hearing sound.

The laser would be pointed at the speaker's microphone, and interpret it as an audio command.

This lets hackers issue voice commands to your speakers, potentially at huge distances away.

"[It's] an attack that is capable of covertly injecting commands into voice-controllable systems at long distances," said the University of Michigan team in a research paper.

 Hackers simply need to shine a modified laser beam at your speakers to hijack them
4
Hackers simply need to shine a modified laser beam at your speakers to hijack themCredit: YouTube

This would allow hackers to do anything you can normally do with a smart speaker.

Hackers could annoy you by playing loud music at night, or making phoney purchases on your account.

But the attacks can get more serious if you have an Alexa linked up to other smart home gadgets.

They could run up big gas or electricity bills using smart heating and lighting systems.

And users with smart door locking systems could be put at risk of burglaries.

Researchers were able to successfully open a garage door using the hack.

The only requirement for the 'LightCommands' hack is a reasonably sophisticated laser set up, and direct line of sight to the speaker.

But this could easily be achieved for reasonably low cost, with lasers aimed through a clear window.

All of the necessary gear can cost well under £400, making the attack worryingly simple to put together.

"The laser current driver with analogue modulation port is the most specialised instrument in the attacker's setup," researchers explained.

"We used the scientific-grade laser drivers that cost about $1,500 (£1,160).

"However, there are cheaper alternatives such as the Wavelength Electronics LD5CHA current driver available at a cost of about $300 (£230)."

 Some cars are even vulnerable to theft using the technique, researchers warn
4
Some cars are even vulnerable to theft using the technique, researchers warnCredit: YouTube

What is Alexa?

If you've never heard of Alexa, here's what you need to know...

  • Alexa is an "intelligent" personal assistant built by Amazon.
  • You can find her on several different devices, including Amazon's Echo speakers.
  • Alexa responds to voice commands, and can talk back to you.
  • She can perform thousands of different tasks, including telling you about the news or weather.
  • But she can do more complex things too, like ordering a pizza or arranging an Uber taxi pick-up.
  • To activate Alexa, you need to say "Alexa" to an Amazon Echo speaker.
  • Alexa currently only works in English and German languages.
  • Because she's powered by artificial intelligence, Alexa is constantly getting smarter.
  • Alexa will also get more used to your voice, and better understand what you want her to do over time.

And the laser itself was bought online for around $18 (£14), the researchers said.

One way of spotting the attack is to look out for laser light on your speaker.

But that won't always work: scientists were also able to execute the hack using invisible lasers.

The experiment worked with infrared laser light that can't be seen by human eyes.

In a statement given to The Sun, an Amazon spokesperson said: "Customer trust is our top priority and we take customer security and the security of our products seriously.

"We are reviewing this research and continue to engage with the authors to understand more about their work."

A Google spokesperson told us: "We are closely reviewing this research paper.

"Protecting our users is paramount, and we're always looking at ways to improve the security of our devices."

10 things you should get your Amazon Echo to do when you first set it up

In other news, check out our guide to the best Alexa tips and tricks.

Amazon recently launched an Alexa ring and glasses, and even a smart oven.

We reveal why is Alexa flashing green, yellow or red.

And Amazon's smart speakers are being commandeered by randy users as part of their kinky sex games.

Do you trust your smart speaker? Let us know in the comments!


We pay for your stories! Do you have a story for The Sun Online Tech & Science team? Email us at tech@the-sun.co.uk


Topics
LOGO_machibet_200x200

Machibet

star star star star star 4.9/

6,000.000+downloads/Free/Bengali/Version2.3.4

777 BDT IPL 2025 Sports First Deposit Bonus

  • 5,000 BDT Daily Reload Bonus
  • Boost Your First Deposit with a 300 BDT Bonus
  • 100% First Deposit Refund Bonus up to 5,000BDT
bKash bank OK Wallet upay
PLAY NOW
Free Bonus
Download For
android