CAPEC-667: Bluetooth Impersonation AttackS (BIAS)
Description
An adversary disguises the MAC address of their Bluetooth enabled device to one for which there exists an active and trusted connection and authenticates successfully. The adversary can then perform malicious actions on the target Bluetooth device depending on the target’s capabilities.
- Likelihood of attack
- Medium
- Typical severity
- High
- Abstraction
- DetailedA low-level, detailed pattern, often for a particular technology.
Mechanism of attack: Engage in Deceptive Interactions
Prerequisites
- Knowledge of a target device's list of trusted connections.
Skills required
- LowAdversaries must be capable of using command line Linux tools.
- LowAdversaries must be in close proximity to Bluetooth devices.
Consequences
- Integrity
Impact not stated
An adversary will be impersonating another Bluetooth device, and may gain access to information pertaining to that user along with the ability to manipulate other information.
- Confidentiality
Impact not stated
An adversary will have unauthorized access to information.
Mitigations
- Disable Bluetooth in public places.
- Verify incoming Bluetooth connections; do not automatically trust.
- Change default PIN passwords and always use one when connecting.