Well, they weren't that sophisticated if they left the bluetooth device transmitting. Pretty stupid if you ask me.
If it were me, I would have either:
1. Require a secret pin to be entered in order to activate the bluetooth.
2. Don't use bluetooth. For example the nRF51822 chip (e.g. in this module [1] allows you to implement your own radio protocols. You could make it impossible to detect - it could only respond when send a secret code of some sort.
Criminals do not care for sophistication nor gimmicks. They use the easiest way to get what they want. This current method has probably worked very well for them, and if it was not for 'Krabs' maybe it would have continued for even longer. Hindsight is 20/20. I am sure the criminals are reading the blog post and looking for the next slightly better method just enough to evade discovery.
I in fact wonder about the criminals who've already thought of all this, are successfully avoiding anything like this detection and making their $$$. I hope not to fall prey to something like this, incredible just how many risks there are.
Comments
Well, they weren't that sophisticated if they left the bluetooth device transmitting. Pretty stupid if you ask me.
If it were me, I would have either:
1. Require a secret pin to be entered in order to activate the bluetooth. 2. Don't use bluetooth. For example the nRF51822 chip (e.g. in this module [1] allows you to implement your own radio protocols. You could make it impossible to detect - it could only respond when send a secret code of some sort.
[1] http://www.seeedstudio.com/depot/Seeed-Micro-BLE-Module-w-Co...
Criminals do not care for sophistication nor gimmicks. They use the easiest way to get what they want. This current method has probably worked very well for them, and if it was not for 'Krabs' maybe it would have continued for even longer. Hindsight is 20/20. I am sure the criminals are reading the blog post and looking for the next slightly better method just enough to evade discovery.
I in fact wonder about the criminals who've already thought of all this, are successfully avoiding anything like this detection and making their $$$. I hope not to fall prey to something like this, incredible just how many risks there are.
You will be surprised how hacky hacker's solutions are. I've seen plenty of extortion screen lockers for windows written in poor VBScript...
In a sense, hackers are really good MVP creators. Make something that works and optimize on cash flow.