Security Affairs
Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion|Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams|Norway ’s Digital Government Infrastructure Hit by a new DDoS Attack|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion|Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams|Norway ’s Digital Government Infrastructure Hit by a new DDoS Attack|
Advertisement

Ad Placeholder

Full Width × 90

Hacking

Samsung Galaxy S5 fingerprint sensor hacked

SRLabs researchers have published a video POC on YouTube to demonstrate how it is easy to bypass the fingerprint sensor on Samsung Galaxy S5. SRLabs researchers have published a video Proof of Concept on YouTube to demonstrate that they were able to bypass the fingerprint authentication mechanism implemented by Samsung Galaxy S5. The researchers demonstrated to […]

Samsung Galaxy S5 fingerprint sensor hacked

SRLabs researchers have published a video POC on YouTube to demonstrate how it is easy to bypass the fingerprint sensor on Samsung Galaxy S5.

SRLabs researchers have published a video Proof of Concept on YouTube to demonstrate that they were able to bypass the fingerprint authentication mechanism implemented by Samsung Galaxy S5. The researchers demonstrated to gain unauthorized access just by using a lifted fingerprint with wood-glue based dummy finger. Remind you of anything?

Principal mobile manufacturers tried to improve user’s security adding biometric authentication system based for example on Fingerprint feature. Months ago Apple proposed its Apple TouchID system that was easily hacked and today’s security experts have found a way to bypass also the Samsung Galaxy S5 Fingerprint feature. The feature implemented in the Samsung Galaxy S5 was also used to facilitate payments through PayPal and theoretically also to make it more secure.

samsung galaxy s5 fingerprint

Samsung Galaxy S5 also implemented a smart feature to allow users to easily transfer money via PayPal circuit just by swiping a finger on the fingerprint sensor, but considering the attack presented by the teamSRLabs  could allow bad actors to access to victim’s PayPal account without providing any secret password. A few days after the official commercial launch of the Samsung Galaxy S5 security experts have successfully hacked Fingerprint sensor with a method quite similar to the one adopted to deceive the Touch ID sensor proposed by Apple.

SRLabs researchers exploited the poor security implementation in the handset fingerprint scanner,  the Samsung Galaxy S5 fingerprint scanner in fact allows multiple incorrect attempts without requiring a password, this means that a bad actor could potentially make an infinite number of tries until the correct match.

Another concerning issue related to the hack presented by the researchers is that after mobile restart the Samsung Galaxy S5 doesn’t require user to enter a passcode before he can use his fingerprint to unlock the Smartphone, this means that in case of theft attackers could have complete access to the device. Despite attackers need to have physical access to the Samsung Galaxy S5 to exploit the vulnerability, it is clear that Fingerprint feature implemented by the giant lack of a proper security design.  I’m sure Samsung will promptly fix it.

Pierluigi Paganini

(Security Affairs –  Samsung Galaxy S5, mobile)

Tags

AppleHackingmobileSamsung Galaxy S5

More Stories>

Dark Caracal Deploys New Go Malware With Ethereum-Based C2 FallbackAPT

Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback

Australian Police Charge Two Over TeamPCP Credential TheftBreaking News

Australian Police Charge Two Over TeamPCP Credential Theft

Meta to Pay Up to $18B Over Teen Social Media UseBreaking News

Meta to Pay Up to $18B Over Teen Social Media Use

Security>

Hacking>

Malware>