"Hacktivist" Targets Fusus, Publishes Map Of Locations

Published Jan 18, 2024 16:41 PM

Fusus is growing and gaining significant attention and some criticism. A self-described "hacktivist" obtained data on 100+ Fusus customer deployments, providing previously unreported insight into the public safety platform's scale and integration with private cameras across the US.

IPVM Image

In this report, we examine the data on Fusus, what it reveals about the scale of its use, and the company's response to IPVM.

Previous Fusus reporting on IPVM includes:

Fusus **********

************* ** *******, **,***** ** * ****** ****** ************ ** ****** *** ****** ****** to ********* ******* ****** * ****** into * ****** ********** ******, ******* that ***** *** "***** *** **** public ****** ******" ** *****.

** ******** ** ******/****-***** *******, ******* individuals/businesses *** "********" ** "*********" ******* with *****. ********** ******* ****** **** them ***** ** ***********, *** *** try ** ****** ******* ** **** capture ******, ***** ***** *** "*********" cameras ***** ***** ******** **** *****. Fusus *** **** *** ******* *********, such ** ****** ***********, ** ******** cameras ******* ********* ************* ****** * "*********" ******."

***** ** *** ** ******* *****-***** surveillance ********* *** ***** ********** ******* gaining ********** **** ****** ****** ******** in *** ****** ******, **** ****** including*****,*****, ***********'* *** *********. ***** **** *** ******** *** enforcement's ******* ** ***** ****** ** catch *********, **** ******* **** ***** privacy ******** ** ****** *********** ******** new **** ** ******* ******** (** ** ******** *** *****).

Database ** ***** ********* *** ******* ********

** ******* **, ****, *** ***** published **** ********* ** * "**********" who ******* "* ******-****** ***** ***" for *********** ** ***+ *********** ** US ****** *********** *** ******.

***:*** ***** - ** **** ***** Police ********** ***** ***** **-******* *******? Find *** ****

*** **** ******** *** ******* **** the ***** ** ***** ******* *** an ********* *** ************ ***** ** the **: ******* ******* ****** ***** directly **** ******. ** ******* *** many ******* *** ********** **** ******* Fusus *******, ********* ****-*****, **********, *** integrated *******.

*** ***** **** *** **** ** create ** *********** ***** ***** ******, ***** *****:

IPVM Image

*** *** ******** **** *** *** and *** *** **** ******* **** deployment ***, *.*., ***** ****, *******, home ** ***** **** **********, *** over *,*** ******* ********** *** ****** 500 **********:

IPVM Image

***** *** ***** ********** **** *** dataset *** *** ** ********, ** covers *** ***** *****. *** ********, Atlanta, **, ***** *** ** ***** has**** ****** ********, ***** **,*** "**********" *******, **,*** "registered" *******, *** *,*** ******-******** *******, with * ***** ** **,*** ******* in *** ****'* ******.

IPVM Image

*** **** ******* *** ************* ** *** **** ** * spreadsheet:

IPVM Image

Total ****** ****** *********

***** ****** ****** *** ***** ********* in **** *******:

  • ***,*** ***** "**********" *******
  • **,*** ***** "*****" *******
  • **,*** ***** "******" *******

** ********* *** **** *** ******** that "*****" ***** ******* **** *** government ********** *** *** ***, ******* "shared" ***** ******* **** ******* ******** own **** *** ***** ****** **** Fusus' *******.

** ***** ** *****, ****** ***,*** "integrated" ******* *** * ********** ********** number *** ** *****-***** ******* **** as ***** *** *** **** * fraction ** *** **** ** ******** of ************ ******* ******** ** *** US.

Hacktivist *********** *** *******

********* ** *** *****, *** **********'* interest ** ***** *** ********* ******** by *** ***********'********* ****** ** *** ********. **** **** **** **** "********* by *** ********** *** *****":

[***** **] *** ************-********** *****. *** they *** ** ****** - ******** the ********** *** ******* ******** **** paying ** ** **** ** **."

*** ***** *** *** ******** *** individual's ****.

********* *** **** ***** *** *** required ******* * ********'* "******** *********"; 404 ***** *** ******* ** "*************" for *** ***** ****** **********. ** order ** **** ***** **********, *** hacktivist **** ******** ********* ***** ******** to ********* ****** ****** ** ********* with *****.

Data ****** ************ *** ***** ************ ********

*** ***** ********* *** *** ** "public-facing" *** **** *** ******* ** what ****** ***** ******** ** **** this **** ******. *****'* ********* ** IPVM ********* ** ** "******** *********," indicating *** ******* ** *** ******** it ** ********* ********. ** ****, the **********'* ******** *** *** ** hacking ** **** ** ***** **** collection.

***** *** *** ********* **** * dataset ****** - *** ******** ********* generally **** ****** ********* ** ** so - *** ***** **** **** its ***** ******** ***** ** ***** to ********** ****** ************.

** *** ****, ******** ******** "*****" have ******** ** ******** ******* ******* hackers, **** ***** ********** **************** **** ****. *** ** **** ****, **** if ***** *** *** ****** *** this **** ** ** ********, *** API *** ******** **********, *** *** subdomains ********* ** ****** **** **** also ******, ********** **** *** **********'* collection ** **** *** *** ** illegal ********* *** **.

Fusus *********

***** ********* ** ****'* ******:

*** *** ******* ******* ***** *** public *********, *** ** ****, ** do *** **** ** **** *** agency ******** ********* *** ****** **** within *********** ** **** ****** *** opportunity ** ***** **** ***** *** public ****** *********** **** *** ** involved **!

**** ******** **, ****** ** *** API *** ******** ** ** ******** accessible, *** *** *** ***** ****.

Comments (2)
UM
Undisclosed Manufacturer #1
Jan 18, 2024

**, ********* ** *****, **** ** a *******, *** *** * *** ?

(2)
CH
Conor Healy
Jan 18, 2024
IPVMU Certified

* ***** **** ** * ********** interpretation ** **** ***** ****.

*** ***** ********* *****'* ****** ******* the ******* ***, **** *** ****** websites ****** *** ** **** ** to ********* ** ******** ***** *******.