Description of Bluetooth Le Spam APK
Recent Flipper Zero Bluetooth spam attacks have now been converted to an Android app, making it possible for a far wider number of devices to deploy these irritating spam alarms.
A software developer by the name of Simon Dankelmann created an Android app that is capable of the same Bluetooth spam after being inspired by prior study on the subject as well as applets created by Flipper Zero that targeted iOS devices and, subsequently, Android and Windows.
This Android software, which goes by the name Bluetooth-LE-Spam, has the ability to build BLE (Bluetooth Low Energy) advertising packets that can be sent to adjacent Windows and Android devices, therefore eliminating the requirement for a Flipper Zero.
Hacker from the Netherlands was arrested for extortion and selling stolen data on the website RaidForums.
Even though the project is still in its early stages of development, BleepingComputer was able to verify that it functions exactly as described.
To be more specific, the application is able to transmit connection requests at predetermined intervals of time, with the smallest period being one second, and it may target 'Fast Pair' on Android or 'Swift Pair' on Windows.
Even though the Android Application Programming Interface (API) permits adjusting the transmission (TX) power level, developers only have limited control over the actual data that is being sent in relation to the TX power level. This is something that should be kept in mind.
This limitation imposed by the Android SDK can lead to poor reception from the target devices; however, this is not an issue with Flipper Zero, which is able to attain a further and more accurate range when connecting to other devices.
During our experiments, we discovered that the target was only able to receive some broadcasts if the Android smartphone that generated them was within a few millimeters or less of the target. On the other hand, in certain circumstances, alerts were generated from a distance of several meters.
During spam broadcasts, Bluetooth-connected devices like mouse and keyboards might become unresponsive, which we found to be an intriguing and potentially problematic side effect. This is yet another method for carrying out disruptive assaults of the "denial of service" variety against a target.
For the time being, the app is more of a demonstration of a potential than a significant risk to users; still, it is beneficial to be aware of how to disable these alerts in the case that you are the one being targeted.
When using an Android device, navigate to Settings > Google > Nearby Share, and then move the toggle on the Show notification setting to the "Off" position.
