Chinese hackers use fingerprints on glass to crack smartphones

Tencent's X-Lab hacker group demonstrated the technique of unlocking smartphone fingerprint sensors in just 20 minutes using a new application they developed and fingerprinting on glass.

At a recent hack event in Shanghai, Tencent's X-Lab hacker group demonstrated a technique to unlock a smartphone fingerprint sensor in just 20 minutes using a new application they developed and the fingerprint on. glass cup.

Specifically, the hacker group invited some viewers to touch the glass. Then Chen Yu, the leader of the group took his phone out to take a fingerprint picture on the cup and put it into the app.

From the captured image, the app will extract the correct data and create a physical copy of the user's fingerprint in just 20 minutes.

This fingerprint copy is then used to unlock some devices equipped with a fingerprint scanner. The results showed that 3 smartphones and 2 other machines were duped by the duplicate fingerprint.

Chen Yu, X-Lab researcher, said that to carry out this attack only one phone and one application is needed.

Picture 1 of Chinese hackers use fingerprints on glass to crack smartphones
X-Lab is one of Tencent's seven security research groups.

The specific method X-Lab uses is not disclosed. But X-Lab claims it is the first group to crack the ultrasonic fingerprint sensor, capacitive sensor and optical sensor commonly used on smartphones.

However, the above statement of X-Lab is not entirely true. Earlier, a woman in the UK used a $ 3.4 screen sticker purchased on eBay to successfully crack the ultrasonic fingerprint sensor on the Galaxy S10.

Picture 2 of Chinese hackers use fingerprints on glass to crack smartphones

X-Lab said it spent months developing the app. They also revealed that extracting a fingerprint from the glass of the phone is actually much easier than a glass.

This hacker group recommends that users wipe their fingerprints regularly when touching something to avoid the unfortunate problem.

  1. TeamViewer is attacked by Chinese hackers, any computer logged in can be controlled
  2. Just 5 minutes, hackers make 'ATM automatically release money', no password needed, no transaction record on the system
Update 29 October 2019
Category

System

Mac OS X

Hardware

Game

Tech info

Technology

Science

Life

Application

Electric

Program

Mobile