The Bluetooth chipset installed in popular models from major manufacturers is vulnerable. Hackers could use it to initiate calls and eavesdrop on devices.

Source

  • viking@infosec.pub
    link
    fedilink
    English
    arrow-up
    15
    arrow-down
    1
    ·
    8 hours ago

    Sounds like the attack scenario is very sophisticated and targeted, and only works within the range of Bluetooth low energy (BLE) connectivity, so 10-15 meters under best circumstances. At that point they might as well eavesdrop on my calls in person.

    • wintermute@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      2
      ·
      30 minutes ago

      I think BLE is only required for the initial compromise (extracting the pairing key). After that the attack can be performed over classic BT, and can impersonate either part (headphones or phone) to the other.
      It’s still very targeted and sophisticated, so no reason to panic unless you have reasons to think someone with the resources could target you.
      Regarding the attacks, they got way beyond eavesdropping calls, since BT headphones usually have access to contacts and smart assistants, that you can use to extract a lot more information

    • solrize@lemmy.ml
      link
      fedilink
      English
      arrow-up
      5
      ·
      5 hours ago

      10-15 meters might be good enough to conduct the attack from a neighboring office or apartment, while actual eavesdropping is not so easy.

    • joel_feila@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      6 hours ago

      Honey i got to go there is a man outside our window with a lapton and an radio antenna "Ignore the man outside your window and just read off your credit card number