Re:Long-Range (200m) BLE Beacons with 1Mb EEPROM
by rasz_pl on Friday August 26, 2016 @08:50AM
(#12365802)
and here is the attack:
-evul haxor learns about those beacons at the target location
-finds a weakness in remote firmware update
-prepares special firmware with added Microsoft/logitech mouse/keyboard emulation (nRF52 can do this). Bonus points if he can make one beacon flash other beacons in range.
-infects one beacon using long range setup (yagi, amp)
-evul haxor learns about those beacons at the target location
-finds a weakness in remote firmware update
-prepares special firmware with added Microsoft/logitech mouse/keyboard emulation (nRF52 can do this). Bonus points if he can make one beacon flash other beacons in range.
-infects one beacon using long range setup (yagi, amp)
-profit