{"id":28141,"date":"2019-07-31T14:58:52","date_gmt":"2019-07-31T14:58:52","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/30349\/iPhone-Bluetooth-Traffic-Leaks-Phone-Numbers-In-Some-Cases.html"},"modified":"2019-07-31T14:58:52","modified_gmt":"2019-07-31T14:58:52","slug":"iphone-bluetooth-traffic-leaks-phone-numbers-in-some-cases","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/iphone-bluetooth-traffic-leaks-phone-numbers-in-some-cases\/","title":{"rendered":"iPhone Bluetooth Traffic Leaks Phone Numbers In Some Cases"},"content":{"rendered":"

\"iPhone\"<\/span><\/p>\n

Security researchers say they can extract a user’s phone number from the Bluetooth traffic coming from an iPhone smartphone during certain operations.<\/p>\n

The attack works because, when Bluetooth is enabled on an Apple device, the device sends BLE (Bluetooth Low Energy) packets in all directions, broadcasting the device’s position and various details.<\/p>\n

This behavior is part of the Apple Wireless Direct Link (AWDL), a protocol that can work either via WiFi or BLE to interconnect and allow data transfers between nearby devices.<\/p>\n

Previous academic research<\/a> has revealed that AWDL BLE traffic contains device identification details such as the phone status, Wi-Fi status, OS version, buffer availability, and others.<\/p>\n

However, in new research published last week<\/a>, security researchers from Hexway said that during certain operations these BLE packets can also contain a SHA256 hash of the device’s phone number.<\/p>\n

“Only the first 3 bytes of the hashes are sent, but that’s enough to identify your phone number,” researchers said.<\/p>\n

Since phone numbers have pretty strict formatting, attackers can use pre-calculated hash tables to recover the rest of the phone number.<\/p>\n

\n