Hacking any Bluetooth Enabled Phone

Currently reading:
Hacking any Bluetooth Enabled Phone

Next time your out on the town and in a bar, just do a bluetooth search for devices, it's shocking how many people leave their phones open for abuse.
 
been doing this for ages. its amazing what you can do in almost any public place (esp. pubs and clubs). i got some nice free home made porn on NYE :eek:
 
btw to those of you that think you have a 'safe' phone (supposedly most modern ones and all nokia & sonyeric). check the firmware version you're using. its shocking how many safe phones still use original firmware that will not protect you. download the latest firmware verison if you arent using it already.
 
it can only help. turning off your visiblity will help too, but the best option is to switch off bluetooth at all times unless you are using it. there's no way to remotely switch it on, but there are applications that can find devices with no visibility, and as with any firewall they can be beaten. in my previous job i was the information security consultant so i had to experiment with the security of our blackberrys. lets just say anything on a blackberry isnt safe at all, and to make them secure it would have taken more time and money than it was worth, so we didnt bother! :eek: any bluetooth device is just as vulnerable, and even the new safe devices are only safe in the short term, no matter what the hackers will find new ways and make new tools. its shocking what you can do with an ipaq and some freely downloaded applications. but you need to assess the risk, whats the chances of an attack (very small) and what do you stand to lose (not much on a personal mobile phone). its not worth worrying about, but it is worth while switching off bluetooth unless you're using it. if someone used your device to make international calls or access the net it could cost you.
 
Last edited:
It's also worth checking your credit level on your contract - O2 just kept putting mine up and up and I've had a few words and dropped it down to just £15 over contract so no-one's going to get very far with my phone whatever.......

I like my bluetooth on so random people can find me but do now have the updated firmware :)
 
OK, if you have blue&me (or any other bluetooth Hands free) its a hassle to remember to turn the bluetooth on and off when you get in and out of the car. Best way would be to bar preminum rate numbers and keep the credit limit low.
 
i usually have my bluetooth on hidden, with my sat nav as trusted, so i can use it for hands free calling,though phone is off at night so I wont get disturbed by nightshift ppl, as Im only on call till 10.30 pm. is there anywhere to check exactly how safe a phone is, and any specific advice on a nokia 6280 would be appreciated.....
 
Furthermore, A lot of deveices which Bluetooth Devices that try to connect to my Nokia N70 will not connect unless there is user confirmation AND the input of a password for both parties which have to match each other :confused:

Also I have the Keypad Locked with a Passcode so calls cannot be dialled unless the phone is unlocked, the phone can't even be switched off without the code unless someone removes the battery or the battery dies.

The phone will only unlocks briefly if someone calls it and then you can answer but calls cannot be made obviously AND the phone remains locked during the duration of the call.

I wonder if they experimented with these scenarios, its all good scare mongoring but it is a pain to remember to disable bluetooth after every transfer or use.

Do you think Unathorised Call insurance would cover it? But then again, how would you prove it?
 
Hmmm, i would disagree about it being a pain to switch off the Bluetooth, Tranc.

I currently have a SE K800i and the Bluetooth activation/deactivation is a shortcut set up by simply pushing the joystick on it. A simply flick, it is on. Another flick, it is off. That is it.

And before the K800i I had (and still do have) the N70 (a brilliant phone, IMHO). And similarly I had a shortcut button set up to activate and deactivate bluetooth (it was the "special key" button on the right hand side, originally for something else which i changed to bluetooth).

Btw, are you gaming now or later? If now, will join you. :D
 
Furthermore, A lot of deveices which Bluetooth Devices that try to connect to my Nokia N70 will not connect unless there is user confirmation AND the input of a password for both parties which have to match each other :confused:

you really think the user confirmation and device pairing process cant be beaten? :rolleyes:
i dont know exactly how it happens (i just download the stuff) but i think it fools the victim device by making it think my device is already paired with a device that is trusted by the victim device. how you fool the phone into thinking it already trusts another device is beyond me, but it works and takes a few seconds using freely downloaded software, even on my ipaq with limited processor power. when i did tests all the victim devices i tried didnt even show that anything was happening on the screen. this no longer works on newer phones, but there will be new software soon enough you can guarantee it.
 
Last edited:
Hmmm, i would disagree about it being a pain to switch off the Bluetooth, Tranc.
Not a pain but I have been forgetting recently, have not used bluetooth for ages but my mates wanted a couple random tunes from my phone and I forgot to turn it off.

There used to be a phone virus that went around VIA bluetooth. An infected phone would try to send any bluetooth enabled phone a message vis bluetooth. Everytime I was in public I would get the message dispalying on my phone,

"Recieve message from "Phone name""?

I obviously used to just say no but the point is I was asked where as I'm sure other peoples older phones would just accept.

Btw, are you gaming now or later? If now, will join you. :D
I just washed my hair, when its all dry (gimme a few hours its long) I'll be gaming. Download yourself Teamspeak so we can talk to eachother and plan sh!t and kill with efficiency :D
 
Everytime I was in public I would get the message dispalying on my phone,

"Recieve message from "Phone name""?

old and new, it worked the same. but you had to accept it. its called bluejacking. a common method was the "you have won! accept to see your prize" message. this is an easy way to pair with protected devices. this isnt as clever as snarfing coz it requires the victim to let you in, but its far easier and surprising how many people will accept almost any message.
 
Back
Top