![\"\"](\"https:\/\/world.edu\/wp-content\/uploads\/2023\/05\/predators.jpeg\")
<\/p>\n<\/p>\n
There has been a\u00a0tenfold increase in sexual abuse imagery<\/a>\u00a0created with webcams and other recording devices worldwide since 2019, according to the the Internet Watch Foundation.<\/p>\n Social media sites and chatrooms are the most common methods used to facilitate contact with kids, and abuse occurs both online and offline. Increasingly, predators are using advances in technology\u00a0to engage in technology-facilitated sexual abuse<\/a>.<\/p>\n Once having gained access to a child\u2019s webcam, a predator can use it to record, produce and distribute child pornography.<\/p>\n We are\u00a0criminologists<\/a>\u00a0who study cybercrime and cybersecurity. Our current research examines the methods online predators use to compromise children\u2019s webcams. To do this, we posed online as children to observe active online predators in action.<\/p>\n We began by creating several\u00a0automated chatbots<\/a>\u00a0disguised as 13-year-old girls. We deployed these chatbots as bait for online predators in various chatrooms frequently used by children to socialize. The bots never initiated conversations and were programmed to respond only to users who identified as over 18 years of age.<\/p>\n We programmed the bots to begin each conversation by stating their age, sex and location. This is\u00a0common practice in chatroom culture<\/a>\u00a0and ensured the conversations logged were with adults over the age of 18 who were knowingly and willingly chatting with a minor. Though it\u2019s possible some subjects were underage and posing as adults, previous research shows\u00a0online predators usually represent themselves as younger<\/a>\u00a0than they actually are, not older.<\/p>\n A section of dialogue between a self-identified adult and the researchers\u2019 chatbot posing as a 13-year-old. Eden Kamar, CC BY-ND<\/p><\/div>\n Most prior studies of child sexual abuse rely on historical data from police reports, which provides an outdated depiction of the tactics currently used to abuse children. In contrast, the automated chatbots we used gathered data about active offenders and the current methods they use to facilitate sexual abuse.<\/p>\n In total, our chatbots logged 953 conversations with self-identified adults who were told they were talking with a 13-year-old girl. Nearly all the conversations were sexual in nature with an emphasis on webcams. Some predators were explicit in their desires and immediately offered payment for videos of the child performing sexual acts. Others attempted to solicit videos with promises of love and future relationships. In addition to these\u00a0commonly used tactics<\/a>, we found that 39% of conversations included an unsolicited link.<\/p>\n We conducted a forensics investigation of the links and found that 19% (71 links) were embedded with malware, 5% (18 links) led to phishing websites, and 41% (154 links) were associated with\u00a0Whereby<\/a>, a video conferencing platform operated by a company in Norway.<\/p>\n It was immediately obvious to us how some of these links could help a predator victimize a child. Online predators use malware to compromise a child\u2019s computer system and gain remote access to their webcam. Phishing sites are used to harvest personal information, which can aid the predator in victimizing their target. For example, phishing attacks can give a predator access to the password to a child\u2019s computer, which could be used to access and remotely control the child\u2019s camera.<\/p>\n At first, it was unclear why Whereby was favored among online predators or whether the platform was being used to facilitate online sexual abuse.<\/p>\n After further investigation, we found that online predators could exploit known functions in the Whereby platform to watch and record children without their active or informed consent.<\/p>\n This method of attack can simplify online sexual abuse. The offender does not need to be technically savvy or socially manipulative to gain access to a child\u2019s webcam. Instead, someone who can persuade a victim to visit a seemingly innocuous site could gain control of the child\u2019s camera.<\/p>\n Having gained access to the camera, a predator can violate the child by watching and recording them without actual \u2013 as opposed to technical \u2013 consent. This level of access and disregard for privacy\u00a0facilitates online sexual abuse<\/a>.<\/p>\n Based on our analysis, it is possible that predators could use Whereby to control a child\u2019s webcam by embedding a livestream of the video on a website of their choosing. We had a software developer\u00a0run a test<\/a>\u00a0with an embedded Whereby account, which showed that the account host can embed code that allows him to turn on the visitor\u2019s camera. The test confirmed that it is possible to turn on a visitor\u2019s camera without their knowledge.<\/p>\n We have found no evidence suggesting that other major videoconferencing platforms, such as Zoom, BlueJeans, WebEx, GoogleMeet, GoTo Meeting and Microsoft Teams, can be exploited in this manner.<\/p>\n Control of the visitor\u2019s camera and mic is limited to within the Whereby platform, and there are icons that indicate when the camera and mic are on. However, children might not be aware of the camera and mic indicators and would be at risk if they switched browser tabs without exiting the Whereby platform or closing that tab. In this scenario, a child would be unaware that the host was controlling their camera and mic.<\/p>\n Revoking access to the webcam following initial permission requires knowledge of browser caches. A recent study reported that although children are considered fluent new media users, they\u00a0lack digital literacy in the area of safety and privacy<\/a>. Since caches are a more advanced safety and privacy feature, children should not be expected to know to clear browser caches or how to do so.<\/p>\n Awareness is the first step toward a safe and trustworthy cyberspace. We are reporting these attack methods so parents and policymakers can protect and educate an otherwise vulnerable population. Now that videoconferencing companies are aware of these exploits, they can reconfigure their platforms to avoid such exploitation. Moving forward, an increased prioritization of privacy could prevent designs that can be exploited for nefarious intent.<\/p>\n Here are some recommendations to help keep your kid safe while online. For starters, always cover your child\u2019s webcam. While this does not prevent sexual abuse, it does prevent predators from spying via a webcam.Chatbots<\/strong><\/h4>\n
![\"\"](\"https:\/\/world.edu\/wp-content\/uploads\/2023\/05\/predatorChat.jpg\")
Methods of attack<\/strong><\/h4>\n
Whereby video meetings<\/strong><\/h4>\n
Keeping your kids safe online<\/strong><\/h4>\n
\n