Breaking Bad: Stealing Patient Data Through Medical Devices
summary
Researchers escalate a Windows 10 digital‑pen to local admin by replacing a manufacturer service binary, reverse‑engineer its proprietary decryption, and recover a MySQL on 3306 exposed connection string that yields patient names, DOBs, prescriptions and portal credentials stored in plaintext. A separate infusion pump yields a default maintenance password, accepts a cloned Wi‑Fi profile over IRDA from a $12 PDA, and, after emulating the pump server with netcat/Python, leaks and accepts XML‑like commands allowing read/overwrite of master drug lists and dosage limits. Tools: Procmon, Wireshark, Python, Sysinternals.
AI-written summary · about
chapters (36)
- 0:00Introduction
- 0:48Sara Barrett
- 1:37Agenda
- 2:36Disclaimer
- 3:13What are connected medical devices
- 5:49Categories of connected medical devices
- 7:05Inhouse medical devices
- 7:33Information loop
- 9:03Ecosystem
- 13:56Why connected medical devices
- 17:16Challenges of connected medical devices
- 20:44Serial to Ethernet converters
- 23:44Attack surface
- 24:39Metric
- 27:11Financial vs Medical Data
- 28:44Case Studies
- 29:28Workflow
- 30:18Default Accounts
- 31:10Use Case Scenario
- 31:53Observations
- 35:29Analysis
- 36:13Reverse Engineering
- 38:01Port Scan
- 39:45Prescriptions
- 40:38Summary
- 41:18IV Infusion Pump
- 42:17Pump Server
- 43:02Lab Setup
- 43:17Initial observations
- 43:59Troubleshooting
- 45:34eBay
- 46:13Exporting Network Settings
- 48:14More Observations
- 49:37Initial Packet
- 53:01Master Drug List
- 55:22Conclusion
related talks
01h 01m(In)Security of Medical Devices
58mMedical Device Security
26mCommSec D2 - Hacking a Hospital for Fun and Profit
36m Macabre stories of a hacker in the public health sector (Chile)
34mPwning Smart Weighing Machines wt API & Hardware Hacking
31mHacking Everything – The Dark Side of the Internet of Things
58mHacking in 2016 - How is our systems broken?
01h 06mBackdoors in Back Doors