HomesecuritySurfingAttack: Captures iPhone, Pixel & Galaxy phones for $ 5

SurfingAttack: Captures iPhone, Pixel & Galaxy phones for $ 5

A team researchers from the Universities of Michigan, Lincoln and Washington showed that one 'hack$ 5, can be used on iPhone, Samsung Galaxy and Pixel phones. The hack works by sending voice commands to the Voice assistant of the devices, using ultrasonic waves that a person cannot hear. The attack, called "SurfingAttack", worked successfully on Siri, Apple, Samsung Bixby and Google Assistant. Researchers could unlock devices, read 2FA messages, make calls, and take selfies.

How does it work ;

The attack uses ultrasonic waves to send a series of commands to micro-electro-mechanical-systems (MEMS). She is the technology microphone which is available on most mobile phones today.

To present the attack, a special converter was used (piezoelectric (PZT) transducer) which costs around $ 5. The researchers placed the device under the table surface. When the target device is nearby, commands can be sent. It was found that the attack is perfect when the distance between the devices is around 50 cm. However, more devices can be used to increase the range.

Devices where the SurfingAttack attack was successful:

  • Google Pixel
  • Google Pixel 2
  • Google Pixel 3
  • Moto G5
  • Moto Z4
  • Samsung Galaxy S7
  • Samsung Galaxy S9
  • Xiaomi Mi5
  • Xiaomi Mi8
  • Xiaomi Mi8 Lite
  • Huawei Honor View 10
  • iPhone 5
  • iPhone 5s
  • iPhone 6 +
  • iPhone X

You can avoid such an attack on mobile by turning off the Voice assistant on the lock screen.

Teo Ehc
Be the limited edition.