CAPEC-667
Bluetooth Impersonation AttackS (BIAS)
2021-06-24
00h00 +00:00
00h00 +00:00
指定 CAPEC 提醒
随时了解指定 CAPEC 的变更。
CAPEC 描述
An adversary disguises the MAC address of their Bluetooth enabled device to one for which there exists an active and trusted connection and authenticates successfully. The adversary can then perform malicious actions on the target Bluetooth device depending on the target’s capabilities.
CAPEC 信息
执行流程
1) Explore
[Find disguise and target] The adversary starts the Bluetooth service on the attacking device and searches for nearby listening devices.
技术手段
- Knowledge of a trusted MAC address.
- Scanning for devices other than the target that may be trusted.
2) Experiment
[Disguise] Using the MAC address of the device the adversary wants to impersonate, they may use a tool such as spooftooth or macchanger to spoof their Bluetooth address and attempt to authenticate with the target.
3) Exploit
[Use device capabilities to accomplish goal] Finally, if authenticated successfully the adversary can perform tasks/information gathering dependent on the target's capabilities and connections.
前提条件
Knowledge of a target device's list of trusted connections.所需技能
Adversaries must be capable of using command line Linux tools.Adversaries must be in close proximity to Bluetooth devices.
缓解措施
Disable Bluetooth in public places.Verify incoming Bluetooth connections; do not automatically trust.
Change default PIN passwords and always use one when connecting.
相关弱点
| 弱点名称 | |
|---|---|
CWE-290 |
Authentication Bypass by Spoofing This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks. |
提交记录
| 名称 | 组织 | 日期 | 发布日期 |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation |
修改记录
| 名称 | 组织 | 日期 | 备注 |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Related_Attack_Patterns |
