Attackers Can Force Amazon Echos To Hack Themselves With Self-Issued Commands

The researchers have dubbed the hack "AvA" because it uses the Alexa feature to force devices to make their own commands. It only takes a few seconds of proximity to a vulnerable device while it's turned on so an attacker can utter a voice command instructing it to pair with an attacker's device. The attacker will be able to issue commands if the device remains within the radio range. The attack is the first to exploit the vulnerability of self-issuing arbitrary commands on Echo devices, allowing an attacker to control them for a long time.