There may be bad news if you purchased one of Amazon’s “Overall Picks” for video doorbells in recent months. New tests from Consumer Reports find that popular doorbell cameras sold under names including Eken and Tuck are rife with security flaws that make it dead simple for anyone to watch your camera footage.
Consumer Reports looked at ten seemingly identical video doorbells sold under various names including Eken and Tuck that are widely available on websites including Amazon, Walmart, Shein, and Temu. All of them are manufactured by Eken Group Ltd., and all use the same companion app called Aiwit. Apparently, hijacking these devices is as easy as downloading Aiwit and putting the doorbell in pairing mode. This allows an attacker to take over the device, view footage, and lock out the owner.
In fact, the tests found you can gain remote access to the doorbells without a password. All you need to see photos from the video feeds is one of the doorbells’ serial numbers.