Wireless ‘BlueBorne’ Attacks Target Billions Of Bluetooth Devices

Threat Post ^ | 09/12/17 | Tom Spring

[Enlightened1]

Researchers disclosed a bevy of Bluetooth vulnerabilities Tuesday that threaten billions of devices from Android and Apple smartphones to millions of printers, smart TVs and IoT devices that us the short-range wireless protocol.

Worse, according to researchers at IoT security firm Armis that found the attack vector, the so-called “BlueBorne” attacks can jump from one nearby Bluetooth device to another wirelessly. It estimates that there are 5.3 billion devices at risk.

“If exploited, the vulnerabilities could enable an attacker to take over devices, spread malware, or establish a ‘man-in-the-middle’ to gain access to critical data and networks without user interaction,” according to the company. “The attack does not require the targeted device to be paired to the attacker’s device, or even to be set on discoverable mode… since the Bluetooth process has high privileges on all operating systems, exploiting it provides virtually full control over the device.”

[RedWing9]

Wonder if Google will go against policy and patch KitKat....

[jurroppi1]

On the horn with Ford right now awaiting an answer regarding what if anything they are doing to deal with this on their sync / MFT systems.

I’m on hold right now, I’ll report back what I hear.

[jurroppi1]

They have not investigated the issue yet. The analyst I spoke with at Ford was going to enter the info into the “appropriate system” to get it documented.