Topics Tools Books & Guides Talk to Securafy

Knowledge Hub / IT Operations

IT Operations

Hackers Offering Fake Free Kindle Ebooks To Hack Amazon Accounts

Hackers Offering Fake Free Kindle Ebooks To Hack Amazon Accounts

Randy Hall By Randy Hall Updated Jul 2024 2 min read Share

Do you own an Amazon Kindle? Amazon has a warning for you if you do. Beware. Hackers are now using poisoned ebooks to delete the contents of infected Kindle readers and take control of a victim's Amazon account.

The hackers take advantage of the fact that on any given day there are literally hundreds of ebooks offered for free on Amazon's platform.

By disguising their poisoned ebook as just another free title it is easy for the poisoned ebook to get lost in the shuffle. Users are already accustomed to having a wide range of free titles to choose from. Most readers don't think twice about downloading anything that looks interesting if it's offered for free.

The hack exploits a token weakness in the Kindle reader's firmware but there is good news. Amazon moved very quickly and has already issued a patch which fixes the issue. The best way to protect yourself if you own a Kindle device (regardless of version) is to download the latest version of the firmware.

Delaying the update could have tragic consequences. This is because once your Amazon account is compromised the hackers have access to any payment information you have stored on the account. Then, they can order products to their hearts' content and have them shipped almost anywhere in the world.

Even if you're not a Kindle owner now is a great time to check your security. Review your Amazon password and be sure you've got two-factor authentication enabled for an added layer of protection.

Millions of people all over the world rely on Amazon shipments. If you're one of those, losing control over your Amazon account could have far reaching consequences indeed. Don't allow that to happen. If you're a Kindle owner grab the latest firmware update today. Review your Amazon security settings as soon as possible.

Join The Conversation

Have a question or perspective on this topic? Add it below.

Randy Hall

About The Author

Randy Hall · CEO & Founder

Randy Hall is the CEO and Founder of Securafy, with decades of experience helping organizations make smarter, safer decisions about technology.

A frequent speaker and instructor at national IT events, Randy has advised thousands of organizations, from startups and SMBs to large enterprises and U.S. government entities, on secure, practical technology adoption. He writes about the decisions business leaders are often expected to make without enough context, including cybersecurity, compliance, AI, cyber insurance, IT strategy, and business resilience.

Outside the office, you’ll often find Randy on Lake Erie enjoying time on his 38-foot Chris-Craft.

Writes about: Cybersecurity strategy, compliance, AI security, business resilience, cyber insurance, SMB risk, IT leadership

More From This Author →

Get Practical Cybersecurity Field Notes

Monthly cybersecurity, compliance, and IT strategy updates from Securafy, written for business owners who need clear next steps.

  • Practical security tips from our Cyber Security Drip series
  • The Securafy Times, our monthly roundup on compliance and IT strategy
  • Occasional updates on new tools, guides, and research
  • No spam — unsubscribe anytime