VMB4500 & Removed Camera Hacked Repeatedly. Camera shows offline.

[Philly123]

My account password is changed weekly and is strong.  My Base station is up to date. I reported 1 year ago that my app and cameras were being hacked.  Arlo support told me that it wasn't possible with 2FA.  The problem has continued.  Frequently finding that my conversations indoors with windows and doors close were being repeated to me outside by certain person(s) - this coincided with my base station still connected and even my cameras disabled.

Wednesday, my Garage camera showed offline but all my others were Ok.  I didn't have time to sort before going out so I dropped the Garage camera off my network and left 3 cameras running. When I came home 3 hours later all 3 cameras registered me coming home - red lights as I moved through the house.  All fine.

When I moved into the Garage that camera lit up (remember it was offline and then removed from the network).  At the same time a voice could be heard coming through the camera.  The app showed it was still not on my network and no images were being recorded & saved on my account from the Garage camera.

I have read quite a bit about backdoors and security glitches in Arlo camera network but cannot stop this ongoing intrusion.

I am at the stage of abandoning the whole setup.

Does anybody have any suggestions please?  or should I just abandon this whole setup?

[Dannybear]

Have you checked your list of 2FA trusted devices on your account.

If you’re using an sms device to receive 2FA code and your mobile device and number has been hacked, this could allow a pesky person access to almost anything.

This is not an expert opinion, there are plenty of information about regarding 2FA shortfalls.

You could also ask Arlo support if they have been accessing the devices recently for testing purposes.

[StephenB]

---

@Philly123 wrote:

Does anybody have any suggestions please?  or should I just abandon this whole setup?

---

First. check for "friend" accounts set up for your system.  If there are any, then remove them https://kb.arlo.com/1101094/How-do-I-delete-friends-from-my-Arlo-account

Second, as @Dannybear suggests, check the trusted device list, and delete anything you don't recognize.

Another approach is to remove the cameras and devices from your account, and then set up a new account from scratch.

If someone has hacked your phone or a PC that you use to access Arlo, then they could be indirectly accessing Arlo (along with lots of other stuff) from those devices.  So you might also want to run malware scans on your PCs, tablets, and smartphones.

Are you integrating Arlo into other solutions (using IFFFT, alexa, etc)?

@Dannybear  wrote:

You could also ask Arlo support if they have been accessing the devices recently for testing purposes.

---

They won't do that without your express consent.