A $15 printed circuit board is all an attacker would need to unlock some Samsung, OnePlus, Xiaomi, and Huawei phones.
The researchers have discovered that two zero-day vulnerabilities which are present in the fingerprint authentication framework of nearly all smartphones can be exploited to unlock Android handsets.
The attack has been named BrutePrint. It requires a $15 circuit board with a microcontroller, analog switch, SD flash card, and board-to-board connector. The attacker will also need to be in possession of the victim's smartphone for at least 45 minutes and a database of fingerprints will also be required.- Xiaomi Mi 11 Ultra, Vivo X60 Pro, OnePlus 7 Pro, OPPO Reno Ace, Samsung Galaxy S10+, OnePlus 5T, Huawei Mate30 Pro 5Gand Huawei P40 - and two iPhones - iPhone SE and iPhone 7.
Smartphones allow for a limited number of fingerprint attempts but BrutePrint can bypass that limit. The fingerprint authentication process doesn't need a direct match between the inputted values and the database value. It uses a reference threshold to determine a match. A bad actor can take advantage of this by trying different inputs until they use an image that closely resembles the one stored in the fingerprint database.
The attacker will need to remove the back cover of the phone to attach the $15 circuit board and carry out the attack. The researchers were able to unlock all eight Android phones using the method. Once a phone is unlocked, it can also be used to authorize payments.Smartphone fingerprint authentication uses a serial peripheral interface to connect a sensor and the smartphone chip. Since Android does not encrypt data, BrutePrint can easily steal images stored in target devices.
says that owners of new Android phones need not worry as the attack will likely not work on phones that follow Google's latest standards.
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Council committee green lights $15 million revitalization plan for Cleveland's Southeast SideThe Cleveland City Council’s Development, Planning and Sustainability Committee signed off on a trio of proposals to inject much-needed capital to bolster development in the city’s Southeast Side.
Read more »
Shirley Ryan AbilityLab gets $15 million donationSchreibers donate $15 million to Shirley Ryan AbilityLab to help fund brain care, research
Read more »
Samsung brings a 2023 update to its M8 smart monitors | Digital TrendsSamsung has introduced its 2023 SmartMonitor lineup including the Samsung M8, M7, and M5 models.
Read more »
Samsung's new Sensor OLED display can read fingerprints anywhere on the screen | EngadgetSamsung has unveiled a new display technology that could lead to new biometric and health-related capabilities in future phones and tablets..
Read more »
Samsung Expands its 'Smart Monitor' Lineup with Three New OptionsSamsung has announced its 2023 Smart Monitor lineup which includes a trio of monitors designed to meet users’ “watch, play, and work” requirements.
Read more »
Samsung’s Apple Studio Display rival just got even better, plus it’s cheaperSamsung announced a new iteration of its Apple Studio Display rival. The 2023 Smart Monitor M8 received multiple upgrades and features.
Read more »