COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONMITRE canlı kaydı

CAPEC-667

Bluetooth Impersonation AttackS (BIAS)

An adversary disguises the MAC address of their Bluetooth enabled device to one for which there exists an active and trusted connection and authenticates successfully. The adversary can then perform malicious actions on the target Bluetooth device depending on the target’s capabilities.

Soyutlama

Detailed

Tipik ciddiyet

High

Saldırı ihtimali

Medium

Saldırıyı anla

Bu saldırı kalıbı nedir?

An adversary disguises the MAC address of their Bluetooth enabled device to one for which there exists an active and trusted connection and authenticates successfully. The adversary can then perform malicious actions on the target Bluetooth device depending on the target’s capabilities.

Uygulama akışı

Saldırı adım adım nasıl ilerler?

1

Explore

Find disguise and target

The adversary starts the Bluetooth service on the attacking device and searches for nearby listening devices.

Kullanılan teknikler

  • Knowledge of a trusted MAC address.
  • Scanning for devices other than the target that may be trusted.
2

Experiment

Disguise

Using the MAC address of the device the adversary wants to impersonate, they may use a tool such as spooftooth or macchanger to spoof their Bluetooth address and attempt to authenticate with the target.
3

Exploit

Use device capabilities to accomplish goal

Finally, if authenticated successfully the adversary can perform tasks/information gathering dependent on the target's capabilities and connections.

Gereksinimler

Saldırının gerçekleşmesi için ne gerekir?

Ön koşullar

  • Knowledge of a target device's list of trusted connections.

Gerekli beceri

  • Low: Adversaries must be capable of using command line Linux tools.
  • Low: Adversaries must be in close proximity to Bluetooth devices.

Gerekli kaynak

MITRE kaydında belirtilmemiş.

Etki

Başarılı saldırı neye yol açar?

Etkilenen alanlar: Integrity

Etkilenen alanlar: Confidentiality

Savunma

Nasıl önlenir ve etkisi azaltılır?

1
Disable Bluetooth in public places.
2
Verify incoming Bluetooth connections; do not automatically trust.
3
Change default PIN passwords and always use one when connecting.