Fresh News for Biometrics?
“Android Banking Trojan Chameleon can now bypass any Biometric Authentication” https://www.threatfabric.com/blogs/android-banking-trojan-chameleon-is-back-in-action
We could easily think of two ways to break/bypass biometrics -
(1) By taking advantage of the zone of False Acceptance, for which AI-enhanced spoofing technique hells a lot.
(2) By attacking a weak default password/pincode that is deployed with probabilistic biometrics in a security-destructive two/multi-entrance formation (as against an ostensibly security-enhancing two/multi-entrance formation.
In any case, both are the threats about which we have kept warning for more than two decades and for which we came up with the conclusive ruling as a 2minute video seven years ago — ‘Biometrics in Cyber Space — “below-one” factor authentication’ https://youtu.be/wuhB5vxKYlg
Interested to know more about the security-destructive effect of biometrics authentication and biometrics-involved MFA? — You could refer to this collection of biometrics blogs “Probabilistic Biometrics Unravelled : How it brings down identity security” https://www.linkedin.com/pulse/biometrics-unravelled-password-dependent-hitoshi-kokumai/
(3) We would certainly be curious to know if another channel to bypass the biometrics is found.
Thanks to Jim Angleton for bringing me to this intriguing report -https://www.linkedin.com/feed/update/urn:li:activity:7144038038371782656
