Researcher hacked an at-home COVID-19 test to give bogus results

Stefan Mileschin · 22nd December 2021, 04:52

At-home COVID-19 tests might not be as trustworthy as you'd hope — not in the hands of a committed hacker, at least. As The Vergenotes, F-Secure researcher Ken Gannon discovered a since-patched security flaw in Ellume's Bluetooth-connected nasal swab test that let him change the reported results. The vulnerability was complicated, but still disconcerting.

Gannon used a rooted Android device to inspect the Bluetooth traffic Ellume's lateral flow tester was sending to the company's mobile app. The researcher pinpointed the traffic used to indicate test results, and wrote scripts to change the outcome. F-Secure Marketing Manager Alexandra Rinehimer even managed to fool Azova, a company issuing certificates for US entry tests, when it supervised her test.

Ellume has made it harder to study and modify the data, and it's not clear iPhone or iPad users could replicate the same feat. The company is also building a portal to help officials verify at-home tests, and has determined that all previous tests were authentic.
https://www.engadget.com/ellume-covi...2.html?src=rss

22nd December 2021, 04:52	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 148,797	Researcher hacked an at-home COVID-19 test to give bogus results At-home COVID-19 tests might not be as trustworthy as you'd hope — not in the hands of a committed hacker, at least. As The Vergenotes, F-Secure researcher Ken Gannon discovered a since-patched security flaw in Ellume's Bluetooth-connected nasal swab test that let him change the reported results. The vulnerability was complicated, but still disconcerting. Gannon used a rooted Android device to inspect the Bluetooth traffic Ellume's lateral flow tester was sending to the company's mobile app. The researcher pinpointed the traffic used to indicate test results, and wrote scripts to change the outcome. F-Secure Marketing Manager Alexandra Rinehimer even managed to fool Azova, a company issuing certificates for US entry tests, when it supervised her test. Ellume has made it harder to study and modify the data, and it's not clear iPhone or iPad users could replicate the same feat. The company is also building a portal to help officials verify at-home tests, and has determined that all previous tests were authentic. https://www.engadget.com/ellume-covi...2.html?src=rss

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Apple will require unvaccinated employees to test for COVID-19 daily	Stefan Mileschin	WebNews	0	22nd October 2021 07:02
FDA approves several rapid at-home COVID-19 tests	Stefan Mileschin	WebNews	0	2nd April 2021 08:28
Everything you need to know about at-home COVID testing	Stefan Mileschin	WebNews	0	15th March 2021 10:47
Abbott's 15-minute, $5 COVID-19 test gets FDA authorization	Stefan Mileschin	WebNews	0	27th August 2020 08:28
MIT uses wireless signals and AI to monitor COVID-19 patients at home	Stefan Mileschin	WebNews	0	16th April 2020 07:44
Lab-in-a-box test can detect COVID-19 in 5 minutes	Stefan Mileschin	WebNews	0	30th March 2020 13:07
Early Ryzen 5 1600 test results hit the web	Stefan Mileschin	WebNews	0	7th April 2017 05:13
FBI says DNC wouldn't give it direct access to hacked servers	Stefan Mileschin	WebNews	0	6th January 2017 08:35
Google is purging hacked spam from your search results	Stefan Mileschin	WebNews	0	8th October 2015 11:28
AntiVirus Test releases latest results	jmke	WebNews	2	9th November 2008 01:56