NCC Group security researchers have developed a new tool that can launch a new sort of Bluetooth Low Energy (BLE) relay attack that circumvents existing defenses and mitigations.
BLE is utilized in a wide range of industries, including automotive, healthcare, security, home entertainment and more, to deliver greatly lower power consumption and costs at communication ranges similar to those provided by Bluetooth. As long as a trusted BLE device is in range, BLE proximity authentication is used to unlock or maintain unlocked products including autos, smart locks, access control systems, and laptops.
Due to the vulnerability of BLE proximity authentication to relay attacks, several mitigations were implemented, including noticeable levels of latency (tight GATT response time limitations), encrypted link layer, and localization measures.
Read More: https://www.securityweek.com/researchers-devise-new-type-bluetooth-le-relay-attacks
