Story perspectives

$30 Smartwatch Hijacked; GPS Trackers Vulnerable to Spy Attacks

8/8/2026

Summary

Story summary

On August 6, 2026, researchers Vangelis Stykas and Felipe Solferini showed that a $30 smartwatch on the SETracker platform can be hijacked.
Their review of 70 GPS devices found most run YiQingTeng, NewGPS2012 or SinoTrack, each without authentication and with server bugs that permit code execution.
The flaws let attackers track locations, spoof devices, intercept messages, eavesdrop audio and activate cameras.
One vendor patched bugs while suppliers have not responded.

1 of 1

Story summary

On August 6, 2026, researchers Vangelis Stykas and Felipe Solferini showed that a $30 smartwatch on the SETracker platform can be hijacked.
Their review of 70 GPS devices found most run YiQingTeng, NewGPS2012 or SinoTrack, each without authentication and with server bugs that permit code execution.
The flaws let attackers track locations, spoof devices, intercept messages, eavesdrop audio and activate cameras.
One vendor patched bugs while suppliers have not responded.