#bluebugging

Podemos dizer que o smartphone é genericamente um dispositivo seguro, no entanto apresenta diversas vulnerabilidades e pode potenciar falhas de segurança. Não se iluda se pensa que está seguro: hackers (piratas informáticos) estão constantemente à procura de brechas para roubar a sua identidade, espiar as suas conversas, furtarem dados importantes, acederem a contas bancárias e até mesmo, caso…

Bluebugging is a type of hacking attack in which the perpetrator gains unauthorized access to a Bluetooth-enabled device. This type of attack can be particularly dangerous as it allows the attacker to gain access to all of the device's data and even make phone calls or send messages without the user's knowledge. To stay safe from bluebugging, it is recommended that you keep your Bluetooth turned off when not in use, only pair with trusted devices, and keep your devices updated with the latest software and security patches. It is also advisable to use strong passwords and two-factor authentication whenever possible. By taking these precautions, you can help protect yourself against this increasingly common form of cybercrime.

It was late at night, the windows were open because we’re two broke adults who can’t afford a place with working air conditioning. After a moment of silence, our mouths began moving, speaking about a reality tv show that we’d been binge watching earlier in the day,

“This is not a good season for Nene, she’s been doing the most.”

“Yeah, well you have to remember she’s going through a divorce.” That was my response, with a soft smile on my face, I’m always ready to start an argument over this show. I could hear their eyes roll at my comment and the laughter began to force itself out of my throat.

“There’s no need for the attitude, you know I’m right.” There’s a bright laugh in return, it lights up the darkness of the room. I don’t think they know this but I’ve never been as comfortable as I am now. A space, where there are no expectations, just mundane conversations and heated reality tv debates.

“Ray, you know I love you.” I almost scoffed, of course I know, it’s one of the only things I don’t doubt. The sky is blue, grass is green, and you love me. I don’t respond, I just shuffle closer and rest my head on their chest. I could never understand how people could hate this. Hate a love so powerful that it could shut down the world. I would burn down every city, if they took this away from me. I take a deep breath, my nostrils fill with this brown sugar candle. I have the matching lotion, we’re always connected one way or another.

“I’m gonna miss you when I’m back at school.” My words push through the warm air, barely heard over the ceiling fan.

“I told you not to bring that up!” But I need to. I need to let you know that distance will never stop me from loving you. All my words feel like they are unspoken, they don’t feel coherent enough to open them up to the space. To allow you to know me for who I am, is this terrifying concept that I’m still working through. In the dark, with my head on your chest I have never been happier to experience something so many people want me to hate. To have a fire burned so deep in me that I would speak about it to even the most conservative and vile people on this Earth. Because to indulge in something so profound is exhilarating and for that I cannot thank you enough.

You lean over to click on the lamp, it douses our bodies in a warm orange glow. I can see all your movements clearly, the way your hands twist together, winding and unwinding like branches of a tree. You start to open your mouth and then pause, eyebrows furrowed. It’s clear that my “cat got your tongue” joke would not melt the tension in your body. With my head cocked to the side, I wait for you to say something.

“Are you sure this is something that you want?” Your eyes close, like it’s almost too much for you to hear my response.

“I just don’t want to feel like I’m holding you back or that I’m being too clingy. It’s very hard to read you sometimes.” The glow of the room feels suffocating, it feels like the walls are moving in. My heart wants you to read me, flip through the pages, and be enthralled by how proficient my words are.

“Uh, I’m not really sure what you mean?” In my body, my first response is annoyance. I don’t like to be uncomfortable. You sigh gently, a slow inhale that’s met with a hard exhale.

“It’s hard to be there for you, when you don’t show any emotions or tell me how you feel!” There’s a rush to your words, like you’re trying to stick them in my skin and make them permanent. I pull my head back to stare at you, almost appalled at how this conversation came to be. Maybe, I don’t need what you think I need. Maybe, I am content with how we are now.

“Look, this is something I want and I don’t think you’re being too clingy.” I silently pray to whoever is listening that my frustration isn’t noticeable, I’m not even sure why I’m upset by this. Your lips are formed in a pout, like you have more to say, more words to push over an already narrow cliff. I can see the moment where you decide not to keep the conversation going. With the excuse of tiredness, you lean forward and give me a kiss. A light peck, something neutral. It doesn’t wipe the confusion nor shame from my body. But as you twist to turn the lamp off, engulfing us in the darkness that we are so used to. Maybe I am wrong to find comfort in the night, maybe you need me in the daytime too.

Our alarm clock is the heavy sounds of the trains, shaking the city and forcing us to rise. The sun’s light casts this shine on both our skin, glowing and interconnected. You smile, big and bright, pushing my bonnet out of my eyes. When it is just us and the city awake, I have this urge to spill my most vulnerable thoughts. I whisper prayers for you in the morning, the clouds and the sky drink my words like it is gospel. They too agree, that even though you snore, you are the best part of the sun rising. When you stir and poke one eye open, a smile is the first thing that graces your face. With the sun in my eyes, and a warmth in my heart I am ready to start the day.

————————————————-

Bluebugging allows someone to remotely gain access to a Bluetooth-enabled device and use it to eavesdrop on phone calls, read text messages, and even track the user's location.

A Bluetooth-enabled computer or smartphone plus proximity to the target device (usually about 30 meters) is all it takes for the attacker to engage in this attack.

Now share your Thoughts with us in the 𝗖𝗼𝗺𝗺𝗲𝗻𝘁 section

Bluepot - Bluetooth Honeypot #Bluetooth #malware #Hacking #Honeypot #Linux

This code is from a University Project written in 2010. This is a newer version of the code than is on Google Code. Bluepot is a Bluetooth Honeypot written in Java, it runs on Linux. Bluepot was a third year university project attempting to implement a fully functional Bluetooth Honeypot. A piece of software designed to accept and store any malware sent to it and interact with common Bluetooth…

{o. a.}

We've all heard of worms, Trojan horses, phishing, and other common computer security attacks that aims to infect your system and steal your data. But what about bluebugging, smishing, and scareware? Brush up on your computer security terminology with these lesser-known attackers.

Malware is serious business. It can slow PCs down to a crawl. On the other hand, some of the terms security researchers have decided to name these sometimes annoying (and often damaging) pieces of code are downright charming.

Here are nine that stand out, followed by seven most people have heard of:

The Security Attacks Most People Have Never Heard Of

Smishing: Smishing or "SMS phishing" refers to a phishing attack that specifically targets mobile phones. The victim would receive an SMS with a hyperlink wherein a malware automatically finds its way in your phone or leads the user to a phishing site formatted for mobile screens. The term was brought on by David Rayhawk in a McAfee Avert Labs blog.

Botnet (Zombie PCs): A portmanteau of the words "Robot" and "Network," a Botnet is any number of internet computers that inconspicuous to their owners; forward e-mails (any of which include spam, malware, or viruses) to other computers on the internet. These infected computers are also known as "zombies". DoS attacks (Denial of Service) often rely on thousands of zombie PCs.

BlueBugging: A craze originally jumpstarted by a Malaysian IT Professional, bluebugging (not to be confused with bluesnarfing) allows a more skilled person to illegally access a cellular phone via Bluetooth wireless technology. This act often times goes unnoticed without any proper notification or alerting to the phone's user. A vulnerability such as this allows phone calls, SMS messages to be read and sent, phonebook contacts to be erased, phone conversations to be tapped, and other malicious activities. But much to the hacker's dismay [I think the hacker knows the limitations… perhaps the point is that widespread impact is minimized because of the range…], access is only attainable within a 10 meter range of the phone.

Pod Slurping: Coined by US security expert Abe Usher; Pod Slurping is when your iPod or any portable USB storage device begins to surreptitiously copy large amounts of files from your computer to its hard drive, it's engaged in something called "Pod Slurping". Pod slurping is becoming an increasing security risk to companies and government agencies. Typically, access is gained while the computer is unattended, and this process can occur in as little as 65 seconds.

Ransomware: A program that makes a computer near unusable then demands payment in order for the user to regain full access. It "kidnaps" the computer! Ransomware is also commonly referred to as a "cryptovirus" or "cryptotrojan." Examples of Ransomware include Gpcode.AK, Krotten, and Archiveus. Ransomware was originally a with a trojan called PC Cyborg, created by a Dr. Joseph Popp.

Scareware: Scareware is software that tricks people into downloading or purchasing it, under the guise of fixing their computer, when in reality the faux anti-virus program is the real problem. Scareware programs often run a fictitious or careless system scan, and then present the user with a list of malicious programs that must be corrected, always leaving itself off of the list. The scareware then informs that in order to fix these "problems" it will require the user to pay a fee for a "full" or "registered" version of the software. Examples of scareware include: System Security, Anti-Virus 2010, and Registry Cleaner XP.

Sidejacking: Sidejacking is a hacking technique used to gain access to your website specific accounts. Websites typically encrypt your password so it cannot be stolen, but then send you an unencrypted "session-id". The session-id is either some random data in the URL, or more often, random data in a HTTP cookie. A hacker who finds the session-id can then use it to gain access to the respective account. Thus enabling the hacker ability to read your email, look at what you've bought online, or control your social network account, and so on. Robert Graham, who pulled together a variety of known and new vulnerabilities and packaged them into an automated session snatcher, was responsible for this term.

Black Hat: "Black Hat" hackers are those people who specialize in unauthorized breaching of information systems, often times attacking those containing sensitive information. They may use computers to attack systems for profit, for fun, or for political motivations. Attacks often involve modification and/or destruction of data which is done without authorization. They also may distribute computer viruses, internet Worms and deliver spam through the use of botnets.

White Hat: A "White Hat" hacker describes an individual who identifies a security weakness in a computer system or network but, instead of maliciously taking advantage of it, exposes the weakness, and repairs the vulnerability protecting the network from unwarranted intrusions or attacks. The term is taken from old western films, where the white hat cowboy is portrayed as the hero, and the black hat as the villain.

The Attacks Everyone Sort of Understands

Worm: Originating in a Xerox Palo Alto Research Center 1979 by engineers, a "Computer Worm" was originally designed to make programs run more efficiently, then later corrupted to be a destructive computer virus that can alter or erase data on computers. Often times, they leave files irretrievably corrupted or slow the PC down to a crawl.

Trojan Horse: A long time and common infection found amongst even the newest of computers, this destructive program disguises itself as a harmless application. Although Trojans are incapable of self-replication, they are still just as destructive as a computer virus. In an act similar to its Greek origin, often times a Trojan horse opens up a backdoor to your computer enabling potential viral infections and allowing hackers to control the PC. Origins trace back to MIT hacker turned NSA spook, Dan Edwards.

Phishing: Originated by hackers who were stealing America On Line accounts by scamming passwords from unsuspecting users, "phishing" is the age-old crime of taking ownership of sensitive information from third parties (phishing scam victims). Information includes usernames, passwords, banking information, and credit card numbers. This is typically accomplished from sending someone an e-mail fraudulently claiming to be a legitimate company, or redirecting someone to a website that looks legitimate but isn't. More often than not, the direct result of being phished is your identity being stolen.

Script Kiddies: A term originated by Marcus Ranum to describe white hats who had no idea what they were doing, a script kiddy (sometimes plural as kiddies) is a derogative term, used by more skilled hackers of computer security systems, to describe young or less experienced hackers who still can be just as much a threat or annoyance. Utilizing cheap techniques, pre-written scripts and sometimes with assistance, the average script kiddy can exploit a weakness with computer networks. The difference is that these untrained hackers are often unaware of the potential consequences of their actions.

Keylogging: Originally designed by Perry Kivolowitz for a Usenet news group in 1983, Keylogging for the most part has become increasingly common, not to mention dangerous. It involves the recording of any keyboard input via internet connection. Not every instance of keylogging is necessarily illegal. It's sometimes done as a way to monitor teens and children.

Social Engineering: Brought into common knowledge by Kevin Mitnick (a hacker popular back in the day), Social Engineering involves obtaining or attempting to obtain private data by illegally persuading an individual to reveal otherwise secure information. The Information released by victims is often then used to attack a computer network. One common example would be when an employee at a large company is convinced to give out his employee identification, and then it is manipulated to gain further access to the said company's network, often sensitive information.