BlueJacking- BlueTooth Hacks

Bluetooth has design and used for short distance communication, it is an open wireless protocol and operate on the frequency of 2.4 GHZ. Now a days mobile phones, laptops and PDA devices has a built in bluetooth option to use. It can use over a range of 10 meter.
Now as you know if there is a technology there is a chance to find a bug in it and use for miscellaneous purpose, in this article we will talk about bluejacking.
The term bluejacking is derived from two words blue represents Bluetooth and jacking represents hijacking. This type of attack is totally limited to bluetooth enable device, the term bluejacking is first reported and carried out by a Malaysian IT consultant.

BlueJacking Explained

It is important to discuss on how it is works before going to the tutorial, bluejacking happen when somebody send an unsolicited messages over Bluetooth to Bluetooth-enabled devices such as mobile phones, PDAs, Laptops, sending a contact which typically contains a message in the name field to another bluetooth enabled device via the OBEX protocol. Remember that the blurjacker does not take control on your phone via bluejacking technique, an attacker simply send messages via bluetooth.

 
In the above picture Siemens M75 is Bluejacking the Sony Ericsson K600i.

BlueJacking Process

  • Go to Contacts.
  • Create a new contact.
  • Write the short message you want to send on the line next to ‘Last name’
  • Save this contact.
  • Select this contact and send via Bluetooth.
  • Your phone will search for devices
  • All the Bluetooth devices near you will be displayed.
  • Select any one you like and send.
  • You have bluejacked someone.

Some good place for bluejacking

  • Busy shopping centre
  • High street
  • Train buses and other public places
  • Cinema
  • Coffee shops
  • Cafe
  • And other busy public places
Also check this out

BlueMaho Bluetooth Security Testing Tool

Note: If you enjoyed this post, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.
Ehacking Staff
With more than 50 global partners, we are proud to count the world’s leading cybersecurity training provider. EH Academy is the brainchild of Ehacking, which has been involved in the field of training since the past Five years and continues to help in creating professional IT experts.

Most Popular

The Complete OSINT Tutorial to Find Personal Information About Anyone

This article mainly focuses on how to discover a person's digital footprint and gather personal data by using open-source intelligence (OSINT). So, in its...

How to find the password of hacked email addresses using OSINT

Open-source intelligence or OSINT is a potent technique, and it can give a lot of valuable information, if implemented correctly with the right strategy...

How to Identify Company’s Hacked Email Addresses Using Maltego & HaveIbeenPawned

This article is part of the Maltego OSINT tutorial, where you will learn to identify the already hacked account, and it’s password using the...

5 Key Vulnerabilities in Global Payroll

The cyber threat against payroll is growing in sophistication and frequency, according to the latest FBI cybercrime report. Many of these attacks exploit fixable...