Popular Fitness Tracking Devices an Easy Target for Hackers, Warns IT Security Experts

Bluetooth Low Energy (BLE) technology used by devices can be hacked to steal sensitive information about users
By: ESET
 
June 28, 2015 - PRLog -- Dubai, United Arab Emirates- Health and Fitness trackers, the sales of which are expected to double this year, are an easy and increasingly popular means of recording and analyzing exercise and activity. This convenience comes at a risk however, warns ESET, as the data these devices transmit can easily be intercepted by hackers, potentially exposing a trove of fitness data from wearables.

“As they are designed to continuously monitor very personal data about the users health and life patters, the information they transmit can represent a great deal of information about the individual,” said Mohamed Djenane, Security Specialist, ESET Middle East. “There is no doubt that no user would be comfortable knowing that this personal information is being accessed by a unknown stranger.”

According to Djenane, the security vulnerability arises out of the use of Bluetooth Low Energy (BLE) technology which connects these devices to things like smartphones and tablets. Bluetooth Low Energy has proven quite popular as it considerably reduces power consumption, making it ideal for devices that are constantly transmitting information such as wearables. The downside of this is that this constant data travel potentially leaves it open to interception by hackers.

These trackers have security measures meant to protect their device addresses. “But in many cases that we have seen, the random addresses for BLE devices are poorly implemented or not applied to certain devices, meaning that devices either remained fixed or poorly randomized. As a result, an app and a smartphone are enough for hackers to intercept private data,” warns Djenane.

While the assumed 50 meter BLE range would limit the scope for malicious activity, there’s the possibility that an attacker could increase the range. In demonstrations, researchers have managed to boost regular Bluetooth’s range eight-fold with a directional antenna. If the same could be done here, the privacy threat becomes greater.

“The take-away for users is that new and emerging technologies usually have associated IT security risks. Unfortunately, hackers seem to uncover these faster than device manufacturers. So it helps to stay weary, and keep yourself constantly aware of the latest threats to make sure the next device you purchase doesn't compromise your security,” concludes Djenane.

About ESET

Since 1987, ESET® (http://www.eset.com/) has been developing record award-winning (https://www.virusbtn.com/vb100/archive/vendor?id=14-title...) security software that now helps over 100 million users to Enjoy Safer Technology. Its broad security product portfolio covers all popular platforms and provides businesses and consumers around the world with the perfect balance of performance and proactive protection. The company has a global sales network covering 180 countries, and regional offices in Bratislava, San Diego, Singapore and Buenos Aires. For more information visit www.eset.com (http://www.eset.com/about) or follow us on LinkedIn (https://www.linkedin.com/company/28967?trk=tyah&trkInfo=tarId%3A1402921556545%2Ctas%3AESET%2Cidx%3A2-1-4), Facebook (https://www.facebook.com/eset?ref=br_tf) and Twitter (https://twitter.com/ESET).

The Company has global headquarters in Bratislava (Slovakia), with regional distribution centers in San Diego (U.S.), Buenos Aires (Argentina), and Singapore. ESET has malware research centers in Bratislava, San Diego, Buenos Aires, Singapore, Prague, Košice (Slovakia), Krakow (Poland), Montreal (Canada), Moscow (Russia). ESET Middle East has its regional office in Dubai Internet City and manages an extensive partner network in 11 countries: United Arab Emirates, Saudi Arabia, Kuwait, Qatar, Oman, Bahrain, Yemen, Lebanon, Jordan Egypt and Libya. More information is available via www.eset.com/me
End
Source:ESET
Email:***@procre8.biz Email Verified
Tags:Eset
Industry:Technology
Location:Dubai - United Arab Emirates
Account Email Address Verified     Account Phone Number Verified     Disclaimer     Report Abuse
Procre8 News
Trending
Most Viewed
Daily News



Like PRLog?
9K2K1K
Click to Share