#mousejack

So last week a starwars friend told me he tried flashing mousejack (https://github.com/RFStorm/mousejack) onto his crazyradio (https://wiki.bitcraze.io/projects:crazyradio:index) (this unit is without the Power Amp) but somehow during the process it fucked up and he bricked the device. Lucky him I had on hand a buspirate v3 (http://dangerousprototypes.com/docs/Bus_Pirate).

Ataca el virus MouseJack: Alerta para usuarios de teclados o ratones inalámbricos

Ataca el virus MouseJack: Alerta para usuarios de teclados o ratones inalámbricos

Muchas veces cuando usted contrae gripe, no tiene ni idea de cómo lo ha hecho. Usted puede atrapar un resfriado de contagiándose directamente del enfermo o al tocar un picaporte que el enfermo haya tocado previamente.

Eso es similar a cómo los virus en el aire infectan los sistemas informáticos. Estos virus se…

Hacking Wireless Keyboards with Mousejack

Bastille Networks, a company that focuses on Enterprise Security, have always taken a much broader approach to security than a lot of INFOSEC companies. Their focus is on a wide range of Airborne attack vectors which are often overlooked in general InfoSec practices.

Recently Bastille released details on MouseJack, a process which allows injection of keyboard and mouse controls to most popular…

Kablosuz Fare ve Klavye Kullananlar Dikkat: MouseJack Hayatınızı Zora Sokabilir!

Kablosuz klavye ve fare kullananların yeni belası olan MouseJack adı verilen saldırılar artıyor. Bilgisayarın kablosuz bileşenlerini hedef alan bu yeni saldırılar, cihazlarımızı tamamen savunmasız bırakıyor.

Hep kullandığımız “çırılçıplak ortada kaldım” deyimin de olduğu gibi, MauseJackde bilgisayarınızı tam…

MouseJack - New attack on wireless mouses

Researchers of Bastille Networks talked about a new method of attacks on wireless mouse and keyboard. This technique, as well as a set of vulnerabilities that it uses, called MouseJack. Before such an attack will not stand the device from Dell, Logitech, Microsoft, HP, Amazon, Gigabyte and Lenovo, are not working through Bluetooth. To carry out the attack may be remotely in the distance of 100 meters, and for the attacker need only a simple USB-dongle, which can collect, spending only about $ 15.

By itself, the theme of the attacks to wireless peripherals is not new, for example, intercept data of Bluetooth-keyboard has demonstrated repeatedly by experts. It is believed that the devices do not use Bluetooth, protected slightly better, but the Bastille Networks researchers argue that it is not.

Experts have found that devices operating at 2.4 GHz, also have their drawbacks. Unlike Bluetooth, this technology is not a uniform standard, which would have to follow the manufacturers, which leaves them wide enough room to maneuver.

Such keyboard transmit the RF signal keystrokes USB-dongle inserted in the computer’s USB-port, and similarly communicate with a computer wireless mouse. The producers realize that leaving the exchange of data with no protection, then expose the user at risk. Consequently, most manufacturers use an encryption method, an encryption key known only to the USB-dongle, that is, only he can decipher what keys were pressed on the keyboard or the mouse has moved somewhere; the attacker (even if he can intercept data exchange) can not do this.

But this theory. In practice, it turned out that the encryption is very often neglected. For example, researchers have found that manufacturers do not consider it necessary to encrypt the communication between the wireless mouse and dongle. Also, in many cases, there is no authentication mechanism: dongle and the mouse does not undergo any procedure doubles, ie the dongle will not see the difference between the packets received from the real mouse, and forged packets sent by the attacker. As a result, an attacker can “pretend mouse” and transmit their own signals dongle clicks and movements. However, the main problem is that the attacker can also send vulnerable dongle created in a certain way the packages that will be regarded as the device keyboard keystrokes, rather than as a mouse movement. That is, an attacker can simulate a full keyboard input, while being within 100 meters of the victim. It does not matter what OS uses the victim, because the attack is not directed to the OS. Bastille Networks Experts believe that in this way you can transfer data at a rate of 1,000 words per minute, which means that the installation of the rootkit on the victim machine only takes about 10 seconds.

The researchers write that the most vulnerable to MouseJack dongles, are based on a series of Nordic Semiconductor transceivers company nRF24L. The researchers themselves were used to create spoofing devaysa same transceiver and old school Nintendo controller from the console. Not that chips nRF24L officially supported sniffing packets, but this function they have been able to realize.

Also, experts write that a couple of lines of code in Python will turn into a tool to attack the USB-dongle CrazyRadio, which was created to control the drone opersornym Crazyflie; it is also based on nRF24L + and is actually enhanced version dongles that are used for keyboards and mice (at the expense of a more powerful antenna).

And now the bad news – Bastille Networks experts have tried to fix the problem, working together with the manufacturers of vulnerable devices, more than three months. It turned out that about half of the mice vulnerable to upgrade is simply impossible, so the patches for them can not wait. You can find a complete list of vulnerable devices here.

Microsoft has announced that is investigating and will release a patch. Logitech has already introduced a new firmware, closing the vulnerability MouseJack. Dell Representatives recommend to owners of wireless sets KM714 install new firmware on the Logitech, contacting the support and holders KM632 – to replace their devices. Lenovo has also agreed to implement a free replacement of vulnerable devices for users that also need to contact the official support.

All details MouseJack published on the official website of vulnerability (it is not only the site, but even your own logo, see. Top illustration). Researchers Bastille Networks also published on GitHub source code of their software and firmware used for attacks.

MouseJack روش جدید هکر ها برای نفوذ به کامپیوتر های شخصی؛ موس و کیبورد وایرلس

به تازگی و طبق اخبار منتشره هکر ها با خرید یک دانگل USB از آمازون آن هم به مبلغ $۶۰ و نوشتن چیزی حدود ۱۵ خط کد از صد فوت دورتر دستگاه شما را هک کنند.

این روش دزدی اطلاعات به تازگی مرسوم شده و به نام ‘MouseJack’ خوانده می شود، کاربری با نام Marc Newlin گزارش این مورد خاص از سرقت اطلاعات را منتشر کرده است.

MouseJack نام روش نفوذ جدیدی است که به واسطه آسیب پذیری موجود در موس و کیبورد های بیسیم و غیر…