Mobile Apps that control IoT - 80% of the tested apps contained vulnerabilities, with an average of 15 flaws discovered per application.

15% of the vulnerabilities discovered, said the researchers, could lead to a man-in-the-middle (MITM) attack, where a hacker could not only intercept communications sent between an IoT device and its smartphone app – but even potentially send it rogue commands allowing a criminal to hijack control.

https://www.bitdefender.com/box/blog/iot-news/many-iot-smartphone-apps-making-life-easy-online-criminals/