Building a dark piconet upon Bluetooth interfaces of computers

Abstract

In this paper we demonstrate an attack scenario in which Bluetooth enabled computers are remotely controlled by an attacker without any security software detecting the connection. We describe in detail the methods to deliver malware, evade detection, elevate permissions, and transport critical iriformation out ofthe network via Bluetooth connections. A prototype system using state-of-the-art operating systems and security software is built to show the practicability of the attack. We also study different mitigation strategies along with their downside. Security improvements for similar scenarios are also discussed

GPS based Bluetooth Broadcasting – Long Range Solution

“…MMTT tool [11] which is permission based advertising to mobile phones target huge number. Remote Bluetooth computers are controlled by attackers without any security software is proposed in [12], in which data could be easily transported out of Bluetooth network.…”