{"id":65568,"date":"2025-02-07T20:58:34","date_gmt":"2025-02-07T20:58:34","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2025\/02\/07\/security-alert-hackers-can-take-control-of-your-mac-via-bluetooth\/"},"modified":"2025-02-07T20:59:47","modified_gmt":"2025-02-07T20:59:47","slug":"security-alert-hackers-can-take-control-of-your-mac-via-bluetooth","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2025\/02\/07\/security-alert-hackers-can-take-control-of-your-mac-via-bluetooth\/","title":{"rendered":"Security Alert: Hackers Can Take Control Of Your Mac Via Bluetooth"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n
\n
<\/figure>\n

Completely introduced by <\/em>Mosyle, the one Apple Unified Platform<\/strong>. Our mission is to make sure Apple units are each work-ready and safe. By way of our progressive and built-in administration strategy, we ship top-tier Apple-specific safety choices encompassing automated Hardening & Compliance, Subsequent Era EDR, AI-driven Zero Belief capabilities, and unique Privilege Administration, all paired with essentially the most superior Apple MDM accessible. This complete resolution is trusted by over 45,000 organizations, effectively managing thousands and thousands of Apple units effortlessly and at an affordable price.<\/em> Join your EXTENDED TRIAL<\/em><\/strong> at this time to find how Mosyle can improve your Apple expertise.<\/em><\/p>\n

\n

A Bluetooth Impersonation Assault (BIAS) permits cybercriminals to benefit from vulnerabilities inside the Bluetooth protocol, enabling them to masquerade as a trusted gadget. The \u201cBOSE QC Headphones\u201d that seem within the Bluetooth menu would possibly really be a malicious gadget ready for an unsuspecting person to attach, probably unleashing chaos.<\/p>\n

On this week\u2019s Safety Chew, I’ll reveal how malicious actors can make the most of a Flipper Zero gadget to transmit misleading keystrokes to a Mac by linking it to a counterfeit Bluetooth gadget. This gained\u2019t be a complete tutorial, as many assets exist already. As an alternative, I intention to spotlight the simplicity of executing such an assault and maybe instill a bit of paranoia in you.<\/p>\n

\n

\n \"Pasted
<\/h4>\n<\/div>\n

Upon preliminary use, Flipper Zero serves as a comparatively innocuous pen-testing gadget. Nevertheless, it may be modified with third-party firmware (particularly, Xtreme<\/a>), unlocking numerous functions that leverage the gadget\u2019s {hardware} capabilities. It was this similar Xtreme firmware that was utilized in 2023 to disrupt iPhones with counterfeit BLE pairing sequences.<\/p>\n

A featured utility is the \u201cDangerous USB\u201d wi-fi rubber ducky keyboard, which additionally operates through BLE (Bluetooth Low Power). This instrument is primarily employed to automate duties or assess gadget safety by simulating a keyboard, coming into instructions at a fee far superior to human pace, and executing scripts effortlessly. Coupled with BLE\u2019s 100-meter vary, it turns into an interesting choice for cybercriminals.<\/p>\n

\n \"Screenshot
Safety Alert: Hackers Can Take Management of Your Mac through Bluetooth 6<\/figcaption><\/figure>\n

In simply twenty minutes and 4 easy steps, I used to be in a position to execute a script that rickrolled my MacBook Air.<\/p>\n

    \n
  1. Launch the Dangerous USB module on the Flipper Zero with the Xtreme firmware put in.<\/li>\n
  2. Switch your required payload to the Flipper. I devised a .txt script that opens YouTube.<\/li>\n
  3. Choose a intelligent Bluetooth gadget title and set up a connection. Residing in a densely populated space, I saved the default title (BadUSB At1l1).<\/li>\n
  4. Upon confirming it as paired, I executed the payload.<\/li>\n<\/ol>\n
    \n \"Copy