DetailedCAPEC-626
CAPEC-626: Smudge Attack
Description
Attacks that reveal the password/passcode pattern on a touchscreen device by detecting oil smudges left behind by the user’s fingers.
- Likelihood of attack
- Not rated by MITRE
- Typical severity
- Not rated by MITRE
- Abstraction
- DetailedA low-level, detailed pattern, often for a particular technology.
Mechanism of attack: Subvert Access Control
Prerequisites
- The attacker must have physical access to the device.
Skills required
- MediumThe attacker must know how to make use of these smudges.
Consequences
- Access Control
Bypass Protection Mechanism
Mitigations
- Strong physical security of the device.
Related weaknesses (CWE)
CAPEC 3.9 links no CWE weakness to this pattern.