Using the XSS we were able to get the CSRF token and perform actions on the victims behalf.
The hack required the creation of a malicious Amazon link, which would be sent to an unsuspecting user.
We conducted this research to highlight how securing these devices is critical to maintaining users privacy.
Alexa has concerned us for a while now, given its ubiquity and connection to IoT devices.
Its these mega-digital platforms that present the biggest security risk and can hurt us the most.
Therefore, their security levels are of crucial importance.
source: www.techworm.net
