NFCdrip Attack Proves Long-Range Data Exfiltration via NFC

guest · Oct 18, 2018

NFCdrip Attack Proves Long-Range Data Exfiltration via NFC
October 18, 2018
https://www.securityweek.com/nfcdrip-attack-proves-long-range-data-exfiltration-nfc

NFC enables two devices to communicate over distances of up to 10 cm (4 in). The system, present in most modern smartphones, is often used for making payments, sharing files, and authentication.

Pedro Umbelino, senior researcher at application security firm Checkmarx has demonstrated that NFC can actually work over much longer distances and it can be highly efficient for stealthily exfiltrating data from air-gapped devices that have other communication systems – such as Wi-Fi, Bluetooth and GSM – disabled.

In his experiments, Umbelino showed how a piece of malware installed on an Android smartphone can be used to transmit a password over tens of meters to another Android phone that is connected to a simple AM radio.

Umbelino noted that the attack may even work on some devices when airplane mode is activated, and highlighted that this is not an Android-specific issue – NFCgrip attacks can be conducted on laptops and other types of devices as well.
Click to expand...

Palancar · Oct 19, 2018

Interesting read. I use NFC several times a day. However; I immediately turn it back OFF after conducting a transaction or using my U2F element. Only takes a second, but I was doing it to conserve battery mostly. Now I have two reasons.

142395 · Oct 20, 2018

I haven't ever used NFC nor Bluetooth, but hope this kind of attack is infeasible as long as I keep it turned off.

Log in or Sign up

NFCdrip Attack Proves Long-Range Data Exfiltration via NFC

guest Guest

Palancar Registered Member

142395 Guest

Log in or Sign up

NFCdrip Attack Proves Long-Range Data Exfiltration via NFC

guest Guest

Palancar Registered Member

142395 Guest

Useful Searches