There's a new and novel way to snoop on Google Home and Amazon Echo devices, researchers have told Forbes. Simple: make them sound like a legitimate application and hope Amazon or Google call for the harmful version rather than the innocuous one. They showed that when someone asked for the latter from an Amazon Echo device, they got the former instead. Again, the researchers said this worked on both Google and Amazon, as they tested the attacks on the Home Mini and the Echo Dot. Amazon and Google actBoth Amazon and Google said they already had protections in place that tried to detect malicious skills.

Source: Forbes May 16, 2018 12:22 UTC