![\"Amazon](\"https:\/\/www.newsbeep.com\/us\/wp-content\/uploads\/2025\/12\/1765893068_482_0x0.jpg\")
<\/p>\n<\/p>\n
All you need to know about the Amazon Kindle security hack.<\/p>\n
SOPA Images\/LightRocket via Getty Images<\/p>\n
Updated December 16 with news of another warning for Amazon users as hackers take advantage of fears surrounding accounts being hacked, and a statement from Amazon, alongside the original reporting on critical Kindle security vulnerabilities as demonstrated at the Black Hat Europe hacker convention.<\/p>\n
Amazon users are always a prime target for hackers, every pun intended, although it is usually phishing attacks that make the headlines. But what if I were to tell you that your Kindle could be used to gain full access to your Amazon account through a malicious book download? Here\u2019s everything you need to know about the critical Amazon Kindle hack that has been demonstrated at the Black Hat Europe hacker convention in London.<\/p>\n
ForbesFBI Confirms 630 Million Stolen Passwords \u2014 How To Check Yours NowBy Davey Winder<\/a>Hacker Creates Malicious Book To Access Amazon Accounts<\/p>\n There is never a shortage of security surprises at the Black Hat Europe hacking conference, and the 2025 London-based event proved to be no exception. A cybersecurity researcher demonstrated how it was possible to access an Amazon account<\/a> using critical vulnerabilities uncovered in the Kindle. What\u2019s more, and the real surprise, it took nothing more than a malicious book download loaded onto the ebook reader.<\/p>\n Valentino Ricotta, an engineering analyst at defense and security company Thales, discovered critical vulnerabilities in Kindle software. Specifically involving the onscreen keyboard and audiobook processing elements. The vulnerabilities enabled Ricotta to access Amazon session cookies<\/a>, which provide access to an already authenticated account session without requiring any additional password or authentication input. <\/p>\n The hacker analyzed the custom Amazon Kindle parsing code for Audible books and found a memory error that could be used to trigger the attack if malicious code was included within a manipulated audiobook download.<\/p>\n Once triggered, enough access was achieved to steal the all-important Amazon session cookies, and, as reported by Cybernews<\/a>, Ricotta demonstrated how this gave access to the associated Amazon account, live on the Black Hat Europe stage. By then chaining this with a second critical vulnerability, this time impacting the onscreen keyboard, which ran with enough privileges but not enough access control, to gain complete control over the Kindle using another malicious file.<\/p>\n Forbes\u2018Users Must Choose\u2019\u2014Microsoft Confirms New Windows Security FeatureBy Davey Winder<\/a>Another Amazon Security Warning As Account Takeover Fears Exploited<\/p>\n A well-known cybersecurity expert, Javvad Malik from KnowBe4 , has warned Amazon users to be vigilant and stay alert, as a surge of phishing attacks exploiting fears of Amazon account hacker attacks has been observed. This type of scam is nothing new, of course, and cybercriminals will naturally look to play on the fact that this is a peak consumer shopping period. Paused Payment PayPal attacks<\/a>, have been confirmed, and 300 million Amazon users<\/a> were at risk across the recent Black Friday sales. Now it\u2019s those Amazon users who are back in the spotlight as Malik warned of a complex, multi-layered attack that starts with a phone call from someone supposedly from the Amazon fraud department. They are no such thing, but it can be very convincing when the recipient is rushed, stressed and then told that their Amazon account has been hacked. The hacker can take advantage in many ways, from using remote-access apps to take control of the victim\u2019s device, the compromise of Amazon account credentials, or even a transfer of funds, in order to somehow solve the issue.<\/p>\n \u201cOn the face of it, this scam is quite alarming as no one wants to be on the hook for purchasing multiple expensive items such as iPhones; and therefore, emotions will be high and urgency to make the problem go away will start to take over people\u2019s more rational sides,\u201d Malik said.<\/p>\n Be sure to get up to date with impersonation scam attacks by checking out Amazon\u2019s advice<\/a> on the matter.<\/p>\n