+8801758300772

+8801723283638

24/7 Customer Support

Can cybercriminals get information from fitness bracelets?

Gambling Email List gives you a high return on investment and also has a low risk of investing in it. We provide our clients with premium data, including email addresses, phone numbers, postal addresses & much more. Offering quality, human-verified contact download to download minutes after you buy is our business. Gambling Email List have 100% Accuracy data on over 300 billion records business and over 400 billion Consumer records. Gambling Email List also have marketing list, direct marketing list also phone number list & fax number list.

Gambling Email List can be magnificently helpful to grow up your campaign as you will get access to a lot of people residing in the multiple places. Our all data is human verified & fresh data. Gambling Email List always provides you with all the clean & fresh email, phone, fax and mailing marketing database for your company bulk campaigns.

Can cybercriminals get information from fitness bracelets?

The proximity of summer makes many people start or resume their exercise sessions, and now they do so accompanied by wearable wristbands that measure data such as calories burned, distance traveled or heart rate at all times, useful devices for the users who for better performance connect to their smartphones.
The proximity of summer makes many people start or resume their exercise sessions Uruguay Mobile Database, and now they do so accompanied by wearable wristbands that measure data such as calories burned, distance traveled or heart rate at all times, useful devices for the users who for better performance connect to their smartphones.

Related Notes:
How cybercriminals profit from mobile malware
How to make your home a cyber-safe place
A quarter of users are unaware of the existence of mobile cyber threats

“There is a wide variety of this type of wearables and several related applications that allow them to be synchronized with the mobile phone, but are these devices safe? Is the owner the only one who has access to the information collected by these bracelets? can they be hacked? All these questions were asked by Kaspersky Lab analysts who, using a simple method, wanted to put them to the test.

Most of them use Bluetooth LE technology to connect with the smartphone, which means that the connection mode is different from that used by this system usually and does not have passwords to configure it since most of these activity wristbands do not have screen or keyboard Brother Cell Phone List. In addition, this type of bracelets uses the GATT (Generic Attribute Profile) system, which means that these devices have a set of services each with specific characteristics.

Thanks to the test carried out, it was discovered that with a simple Android SDK code, most of the fitness wristbands on the market could be accessed. In some cases, they were unable to obtain data on the specific characteristics of each service. However, by testing with devices from other brands, they were able to read these descriptors which, according to Kaspersky analysts, are likely to correspond to user data.

After successfully connecting with these devices, the next step was to create an application to automatically search for activity bracelets. The results were not delayed. In just over six hours it had connected to 54 different devices. Specifically, during the experiment, the Kaspersky analyst managed to connect, above all, to devices from the Jawbone and FitBit brands, but also from Nike, Microsoft, Polar and Quans. All this despite two alleged limitations that these bracelets have: their radius of action, which is supposedly 50 meters, although it is usually much smaller, and the fact that a device cannot connect with more than one telephone at the same time.

The reality is that a cybercriminal has great possibilities of connecting to one of these devices either because the bracelet is not previously synchronized with any smartphone or because the hacker blocks that connection and replaces it with another with his terminal. Fortunately, being able to synchronize a mobile with a bracelet does not mean that users’ data can be directly accessed. Typically, authentication from the bracelet itself is required to receive notifications.

However, it is not difficult to achieve this authentication. Usually it is enough for the user to press a button on the bracelet when it vibrates, something that can be achieved by restarting the notification until it is pressed. Once this step is completed, accessing the data on the device is simple. And, despite the fact that these fitness bracelets currently do not contain much information and what they do have is usually sent to the cloud every hour or so, the risk is evident and executing actions on hacked devices is very simple.

After the experiment, the conclusions reached by Kaspersky Lab analysts is that it is relatively easy to hack one of these wristbands and, although at the moment they do not reveal information that is too useful for cybercriminals, in the future, with devices more sophisticated, they may use this data to their advantage.

Leave a comment

Your email address will not be published.