"The vulnerability would be complex to replicate and would require physical proximity to the target," a Logitech spokesperson wrote in a statement. When WIRED reached out to the affected vendors, some downplayed the severity of the mousejacking attack. “It’s like having an expensive deadbolt and leaving it unlocked,” says Rouland. Most of the vulnerable keyboards did encrypt their communications, the researchers say, but didn't properly authenticate communicating devices they would still allow another rogue device to inject unencrypted keystrokes over the same connection. The result, Bastille’s researchers say, is that many of the affected companies failed to take advantage of Nordic's encryption option, allowing the dongles that receive those communications to accept keystrokes from another device using the same radio protocol.
Use apple mouse and keyboard on pc Bluetooth#
But unlike standard Bluetooth chips, the Norwegian firm's cheap, low-power shortrange radio communications chips require that vendors write their own firmware to implement that encryption and secure the connection between computers and peripheral devices. Rouland points out that the exploit, which affects devices that use a little-studied proprietary radio protocol rather than Wi-Fi or Bluetooth, leaves even PCs that have been “airgapped”-isolated from the Internet-vulnerable if someone has plugged in a wireless keyboard dongle.īastille’s mousejack attack doesn't take advantage of one single vulnerability, but instead a collection of distinct problems in the firmware of wireless devices that use chips sold by the Norwegian firm Nordic Semiconductor.
They also built a radio-enabled Nintendo controller capable of running their attack software, which they plan to show off at the RSA conference in San Francisco next week.
They tested as far as that hundred-yard range, though they found that the attack was more reliable with a more powerful Yagi antenna and believe it could likely be extended further.
Use apple mouse and keyboard on pc code#
In their tests, Rouland and Bastille researcher Marc Newlin used a $12 Geeetech Crazyradio USB radio dongle attached to a laptop running their exploit code to pair with the victim devices. “With about fifteen lines of code, you can take over a computer more than a hundred yards away,” says Chris Rouland, Bastille’s CEO, who previously founded the hacking firm Endgame, a US government contractor. That’s a new warning from researchers at the Internet of things security firm Bastille, who released an advisory today that seven different companies’ wireless keyboards and mice are vulnerable to an exploit they’ve dubbed “mousejacking.” The attack-which affects a broad collection of devices sold by Logitech, Dell, Microsoft, HP, Amazon, Gigabyte and Lenovo-lets an interloper inject mouse movements or keystrokes at a rate of a thousand words per minute from an nearby antenna, even when the target device is designed to encrypt and authenticate its communications with a paired computer. For millions of cheap peripherals, those innocent-looking radio receivers may be carrying on a sly, long distance relationship-letting an antenna-wielding intruder silently type malicious commands on your PC.
That tiny dongle plugged into your USB port and paired with your wireless keyboard or mouse isn’t as monogamous as it pretends to be.
0 kommentar(er)
