With bluetooth to the fake certificate
Security researchers have succeeded in falsifying a corona self-test via Bluetooth. The certificate issued was then also accepted without difficulty. The manufacturer has already closed the serious loophole.
Corona self-test falsified via Bluetooth
The researchers at F-Secure have succeeded in designing the result of a corona self-test as they wish. The product was investigated and successfully hacked “Ellume COVID-19 Home Test”that comes with an accompanying app for smartphones. F-Secure was able to intercept communication via Bluetooth and determine the result of the corona self-test itself after a little tinkering (source: The Register).
Whether the test falsified negatively or positively is not relevant, according to the researchers. With the help of the Android app for the corona self-test, the desired status can be changed relatively easily. There were also no difficulties in the subsequent review of the test certificate created in this way. Here, the service provider Azova was duped, who is responsible for checking travelers to the USA, among other things.
Tips about the turn of the year in Corona times are available in the video:
Fake corona tests: the manufacturer reacts immediately
Before the results were published, F-Secure informed the manufacturer of the corona self-test. Not only did Ellume show understanding, he reacted immediately. According to the company’s own information, there is no longer any possibility of counterfeiting. In addition, Ellume did re-examined all tests carried out so far and cannot detect any irregularities. In addition, a verification portal is now to be set up.
The manufacturer remains convinced of the Corona self-test with app and Bluetooth connection. They are offering “one of the safest tests available on the market,” they say. Unlike conventional, non-digital solutions, which “can easily be falsified”, your own tests would be a higher level of security Offer.