Even though the mobile malware threat wasn't taken too seriously by many users, comfortable that Bluetooth can only operate up to 10 meters, because of a new device (BlueSniper), phones can now be attacked from a couple of meters distance.
BlueSniper is equipped with a directional "yagi" antenna, set up on a special "cannon", installed with a Bluetooth module and a processor (also connectable to
a laptop).
BlueSniper's inventor, John Hering, is a wireless security consultant for Flexilis (wireless research and development firm working primarily with Bluetooth and wifi).
He declared that the device he created is capable of attacking phones or other Bluetooth devices from as much as two kilometers away.
During tests, the BlueSniper spotted around 20 Bluetooth devices, all on a radius of almost one kilometer. However, the experiment didn't take place in very appropriate conditions, since the police was carrying out an extensive search in the area, due to a bomb threat.
John Hering declared that all the BlueSniper components are available to anybody, only cost a few hundred dollars, and putting it together shouldn't be too much of a challenge. The final result contradicts the guarantees given by the Bluetooth experts.
Bluetooth Special Interest Group claims that such an attack can only occur from a very small distance, and that all precaution measures have been taken in order to ensure a comfortable level of security.