 |
 |
 |
She drafted the notification: "Urgent: Evocam web server exposed at your IP. Remove port forwarding immediately. Change router password. Do not use default credentials."
No login screen. No password. Evocam, by default, served its MJPEG stream to anyone who asked.
The email arrived at 3:14 AM, flagged as high priority by the cybersecurity firm’s automated scraping system. For analyst Mara Chen, the query was routine: intitle:"Live View" inurl:webcam.html . But a junior analyst had added a specific tag: Evocam . Evocam Inurl Webcam.html
"Evocam" was not a hacking tool. It was a piece of macOS software, popular a decade ago, designed to turn an old laptop or a USB camera into a home security or pet-monitoring system. Its default settings were famously lazy. When a user enabled the "web server" feature, Evocam generated a simple, predictable file structure. At the heart of it was a file: webcam.html .
She hit send on the email. Then she added a note to the firm's threat intel database: "Evocam: inurl:webcam.html. Active scans up 40% this quarter. Default configurations remain the leading cause of exposure." She drafted the notification: "Urgent: Evocam web server
Mara's heart didn't race; this was too common. She started typing notes for the client—a small accounting firm that didn't know their forgotten "server" in the back office was broadcasting its interior to the world. But then she noticed the chat overlay. A feature of Evocam allowed viewers to send a text message to the camera's host. The chat log, embedded in the HTML, was active.
Mara opened her browser and typed the raw IP address from the log: http://203.0.113.45:8080/evocam/webcam.html Do not use default credentials
The page loaded in three seconds. A grainy, wide-angle image filled the screen. It was a living room. A beige sofa. A stack of unopened boxes. A calendar on the wall showing last month. In the corner of the frame, a timestamp ticked in real-time: 2024-11-15 03:16:22 .
Three messages appeared, timestamped over the last hour: [01:47] Anonymous: turn camera left [01:52] Anonymous: I see your router. Default password? [02:30] Anonymous: Nice dog. What's his name? Mara zoomed in. By the sofa, a sleeping Labrador retriever. A collar with a bone-shaped tag. The tag's text was blurry, but the phone number was readable.
