Planning to download free eBooks for your Kindle? Cybersecurity experts are now warning users to stop picking up ebooks from random third-party websites as a new hacking method can give attackers access
to your Amazon account, including your saved credit card.Kindle is one of the most popular e-readers,and many people use the name to refer to all e-reading devices. However, this huge popularity also makes Kindle an easy target for hackers.A new demonstration by an ethical hacker in London shows how easy it can be for cybercriminals to misuse a loophole in Kindle software and hijack a user’s Amazon account, The Times reported.ALSO READ: Alert! Google To Remove Dark Web Scan Tool Next Year, All You Need To Know
According to the report, the security analyst from Thales showcased the attack at a recent cybersecurity convention. They loaded a malicious eBook onto a Kindle -- not from Amazon, but by sideloading it directly. Once the fake book was added, the hacker was able to exploit hidden vulnerabilities in the device. From there, they gained full access to the Amazon account linked with that Kindle.This access is more dangerous than it sounds. With control of the account, hackers can use the stored credit card to buy more eBooks or even make additional purchases without the owner’s permission. The demonstration clearly showed how a simple-looking file could put both your device and your money at risk.The report mentioned that experts compare this threat to installing unofficial apps on a smartphone. Just like a harmful APK can take over your phone, an unverified eBook can allow attackers to run malicious code on your Kindle. The issue becomes bigger because sideloading eBooks is a common practice among users looking for free or discounted content.While Amazon is said to have patched some of these vulnerabilities, ethical hackers warn that similar flaws may appear again in the future. As attackers continuously find new tricks, Kindle users must stay alert.