biometric authentication Archives

Researchers studying cybersecurity have found that Chameleon, an Android banking virus, has been modified and is now targeting customers in Italy and the United Kingdom. "This evolved Chameleon variant represents a restructured and enhanced iteration of its predecessor, all while expanding its targeted region," a report shared with The Hacker News by Dutch mobile security firm ThreatFabric stated. "It excels in executing Device Takeover (DTO) using the accessibility service." Cyble previously reported on Chameleon in April 2023, stating that it had been used to target specific users in Poland and Australia since at least January. Similar to previous banking malware, it has a history of abusing its access to Android's accessibility service to read more Chameleon Android Banking Troja...

Researchers have found a low-cost attack method that may be used to brute-force fingerprints on cellphones in order to get beyond user authentication and take over the devices. The BrutePrint method uses two zero-day vulnerabilities in the smartphone fingerprint authentication (SFA) framework to circumvent restrictions placed in place to stop unsuccessful biometric authentication attempts. Cancel-After-Match-Fail (CAMF) and Match-After-Lock (MAL) vulnerabilities take use of logical deficiencies in the authentication framework that result from inadequate security of fingerprint data on the Serial Peripheral Interface (SPI) of fingerprint sensors read more New BrutePrint Attack Lets Attackers Unlock Smartphones with Fingerprint Brute-Force. Stay one step ahead of cyber threats with...

Tag: biometric authentication

Chameleon Android Banking Trojan Variant Bypasses Biometric Authentication

New BrutePrint Attack Lets Attackers Unlock Smartphones with Fingerprint Brute-Force