Hackers can remotely steal your fingerprints from Android smartphones
Two FireEye researchers have discovered a new way to steal the fingerprints of Android smartphone users remotely without their knowledge and of course without their consent.
Researchers Tao Wei and Yulong Zhang have discovered four new ways to attack Android devices and steal a user's fingerprints. The researchers will demonstrate their exploit at the Black Hat conference in Las Vegas next week.
https://www.secnews.gr/100698/visual-hacking/See also: Can you hack a PC by looking at it? | What is Visual Hacking?
The researchers said only smartphones with fingerprint scanners are vulnerable.
Of the four attacks described by the researchers, one in particular – dubbed a “fingerprint sensor spying attack” – can remotely collect fingerprints on a large scale, Zhang said.
Researchers confirmed that the exploit worked on the HTC One Max and Samsung Galaxy S5, allowing the hacker to secretly obtain a fingerprint image from an affected device because device manufacturers do not fully lock down the sensor.
What is particularly frightening is that, after the hacker managed to gain access through the attack, the fingerprint sensor continued to quietly collect fingerprint data for anyone using the device, and remotely sent it back to the hacker, thus providing him with an incredible amount of data.
https://www.secnews.gr/100710/rip-java-plug-in-%ce%bc%ce%ac%ce%bb%ce%bb%ce%bf%ce%bd-rest-hell/btn-large” variation=”btn-success”]Read more: RIP Java Plug-In! Or rather Rest in Hell!
“In this attack, the victims’ fingerprint data falls directly into the hands of malicious hackers. For the rest of the victim’s life, the attacker will be able to use their biometric data to carry out other malicious actions against them,” Zhang said.
Isn't it scary?
