Please ensure Javascript is enabled for purposes of website accessibility

Hackers Can Hijack Siri and Alexa With $3 Worth of Parts

By Danny Vena - Nov 28, 2017 at 8:01PM

You’re reading a free article with opinions that may differ from The Motley Fool’s Premium Investing Services. Become a Motley Fool member today to get instant access to our top analyst recommendations, in-depth research, investing resources, and more. Learn More

Voice technology is fairly pervasive, but now hackers can target your device with change from the sofa cushions.

Voice-activated digital assistants have become one of the more pervasive technologies in the world, found on nearly every smartphone, with Apple Inc.'s (AAPL 1.89%) Siri being one of the most well-known.

Once restricted to phones, these virtual helpers can now be found on a wide variety of devices. Smart speakers like Amazon.com's (AMZN 3.60%) Echo and Alphabet Inc.'s (GOOGL 4.16%) (GOOG 4.41%) Google Home top the list. The technology is present in many home computers via Microsoft's (MSFT 1.26%) Cortana, and in an increasing number of cars, like the Audi (AUDVF) Q3 with voice commands.

But hackers are hard at work trying to gain the upper hand in any computer technology, and voice control is high on their hit list.

Voice-control button on a steering wheel

Hackers can now hijack voice-controlled devices. Image source: Getty Images.

The silent attack

While many methods employed by hackers require a user to make some error in judgement, like clicking a malicious link in a seemingly legitimate email, these latest attacks can be accomplished without any misstep from the user.

Researchers from China's Zhejiang University have reportedly discovered a way to hijack the most widely used voice-controlled devices using ultrasonic frequencies that are inaudible to human hearing, but can be detected by the microphones on your smartphone and other devices. Deploying a technique they called a "DolphinAttack," the team translated some of the most-used human voice commands into high frequencies -- above 20 kHz -- and then aimed them at smartphones, tablets, smart speakers, and even some in-car interfaces.

In their recently published study, the researchers tested voice control agents from some of the biggest names in technology, testing 16 in all. Siri, Google Now, and Amazon's Alexa were all subjected to the experiment, as were Cortana, Audi voice command, and Samsung's (NASDAQOTH: SSNLF) S Voice.

The research team was able to use basic commands like "Hey, Siri" and "Alexa" to activate the devices, as well as successfully instructing iPhones to "call 1234567890" and an iPad to FaceTime the same number. They were able to convince Google Now to switch to airplane mode, and even successful at controlling the navigation system on the Audi. The hack was effective across every device tested, in a variety of languages.

The attacks were accomplished using a Samsung Galaxy S6 Edge smartphone, an ultrasonic transducer, a low-cost amplifier, and a battery. Excluding the smartphone, the cost of the parts necessary to build the hacking tool was less than $3.

Effective, but with limitations

There are certain limitations that currently restrict the effectiveness of the hijack. The hacking tool had a range of only five or six feet. Also, it was necessary for a user's device to be activated in order for the hacker's commands to be accepted, which is more likely with smart speakers than cellphones. The commands had limited effectiveness in noisy environments. And because digital assistants provide audible responses to voice requests, it's unlikely that these attacks would pass unnoticed.

Still, this research serves as a cautionary tale. Advances in technology come with limitations and new sets of vulnerabilities all their own.

Invest Smarter with The Motley Fool

Join Over 1 Million Premium Members Receiving…

  • New Stock Picks Each Month
  • Detailed Analysis of Companies
  • Model Portfolios
  • Live Streaming During Market Hours
  • And Much More
Get Started Now

Stocks Mentioned

Apple Inc. Stock Quote
Apple Inc.
AAPL
$141.56 (1.89%) $2.63
Microsoft Corporation Stock Quote
Microsoft Corporation
MSFT
$262.85 (1.26%) $3.27
Alphabet Inc. Stock Quote
Alphabet Inc.
GOOGL
$2,265.26 (4.16%) $90.51
Amazon.com, Inc. Stock Quote
Amazon.com, Inc.
AMZN
$113.50 (3.60%) $3.94
AUDI AG Stock Quote
AUDI AG
AUDVF
Alphabet Inc. Stock Quote
Alphabet Inc.
GOOG
$2,277.74 (4.41%) $96.12

*Average returns of all recommendations since inception. Cost basis and return based on previous market day close.

Related Articles

Motley Fool Returns

Motley Fool Stock Advisor

Market-beating stocks from our award-winning analyst team.

Stock Advisor Returns
316%
 
S&P 500 Returns
112%

Calculated by average return of all stock recommendations since inception of the Stock Advisor service in February of 2002. Returns as of 07/06/2022.

Discounted offers are only available to new members. Stock Advisor list price is $199 per year.

Premium Investing Services

Invest better with The Motley Fool. Get stock recommendations, portfolio guidance, and more from The Motley Fool's premium services.