Nearly 30 models of GPS trackers – most manufactured by Shenzhen i365 Tech – have serious security flaws. Avast says anyone with an internet connection could track the devices’ real-time location and historical movements. The security firm estimates 600,000 vulnerable devices are in use with the default “123456” password, and it warns that all data they send to the cloud is unencrypted and could be intercepted by attackers. 50 mobile apps that rely on the underlying platform for interfacing with the GPS location-tracking devices have been downloaded more than 500,000 times.”]
Source: https://www.cuinfosecurity.com/track-trackers-gps-devices-fail-security-tests-a-13028