Critical Vulnerabilities in Amazon Kindle Exposed at Black Hat Europe

During the Black Hat Europe hacker convention in London, Valentino Ricotta, an engineering analyst at Thales, demonstrated a significant security vulnerability in Amazon Kindle devices. This exploit allows hackers to gain unauthorized access to Amazon accounts through the download of a malicious ebook. Ricotta's presentation highlighted how vulnerabilities in the Kindle's software, particularly in the parsing of audiobooks and the onscreen keyboard, could be exploited to access sensitive user information.

ForbesTom's Guide

The exploit involves a two-step process. Initially, a malicious ebook is downloaded onto the Kindle, which triggers a memory error during the parsing phase. This error allows the hacker to access Amazon session cookies, enabling entry into an already authenticated account without needing a password. Ricotta further demonstrated that by chaining this vulnerability with another flaw in the onscreen keyboard, he could gain complete control over the Kindle device itself. This method poses a risk even when the Kindle is not actively connected to the internet, as the device remains powered on and susceptible to background attacks.

ForbesTom's Guide

Following the demonstration, Ricotta responsibly disclosed the vulnerabilities to Amazon, which promptly addressed the issues through automatic updates to all affected devices. Amazon confirmed the existence of the vulnerabilities and expressed appreciation for the security researchers who help maintain high security standards. Ricotta was awarded a $20,000 bug bounty for his findings, which he reportedly donated to charity.

Forbes

This incident is not isolated; it echoes a similar vulnerability discovered in 2020 by security researcher Yogev Bar-On, who identified loopholes that could also allow hackers to take control of a Kindle via an ebook. This earlier exploit, dubbed "KindleDrip," was patched in December 2020, and Bar-On received an $18,000 bug bounty. As of now, there is no evidence that either vulnerability has been actively exploited outside of controlled tests.

Tom's Guide

While the vulnerabilities have been patched, experts advise users to exercise caution when downloading ebooks, particularly from self-published authors or unknown sources. Users are encouraged to research authors and publishers, check ratings and reviews, and avoid dubious third-party sites. The potential for malicious code to be introduced through seemingly harmless downloads remains a concern.

Tom's Guide

• “It’s about being aware of these kinds of threats, and not trusting third-party websites,” — Valentino Ricotta, Engineering Analyst at Thales

Tom's Guide

• “We identified and fixed vulnerabilities affecting Kindle E-readers and the Audible functionality on these devices. All affected devices have received automatic updates addressing these issues. We appreciate the security researchers who help us maintain high security standards for our customers.” — Amazon Spokesperson

Tom's Guide

The recent demonstration of vulnerabilities in Amazon Kindle devices underscores the importance of cybersecurity awareness among users. While Amazon has taken steps to mitigate these risks, the incident serves as a reminder of the potential dangers associated with downloading content from unverified sources.

Forbes