A flaw has been discovered in Kindle devices that could allow cybercriminals to steal users' Amazon login and banking information.

The bug, known as KindleDrip, was first discovered by Israeli cybersecurity firm Check Point Software. The company published a report on its public research website detailing how these hackers are penetrating Kindle devices.

A hacker can gain access to a device through an e-book or document containing malware, and these files can be easily opened from any virtual library or website. Once a user downloads and opens the infected e-book, the malware takes control of the device and gains full access to the person’s Amazon account and potentially banking information as well.

Cybersecurity consulting firm Realmode Labs discovered another vulnerability in the Send to Kindle feature, which allows users to send documents, eBooks, and webpages to a personal Kindle device. A user could unknowingly send an eBook infected with malware to their device or someone else's.