COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONLive MITRE record

CAPEC-626

Smudge Attack

Attacks that reveal the password/passcode pattern on a touchscreen device by detecting oil smudges left behind by the user’s fingers.

Abstraction

Detailed

Typical severity

High

Likelihood of attack

Medium

Understand the attack

What is this attack pattern?

Attacks that reveal the password/passcode pattern on a touchscreen device by detecting oil smudges left behind by the user’s fingers.

Requirements

What does the attack require?

Prerequisites

  • The attacker must have physical access to the device.

Skills required

  • Medium: The attacker must know how to make use of these smudges.

Resources required

Not stated in the MITRE record.

Impact

What does a successful attack lead to?

Bypass Protection Mechanism

Affected scopes: Access Control

Defence

How is it prevented and mitigated?

1
Strong physical security of the device.
CAPEC-626: Smudge Attack — DayBreach Saldırı Sözlüğü · DayBreach