There’s a major Android bluetooth security flaw. Here’s how to fix it

By Christian de Looper February 10, 2020

Looks like it’s time to check if you have an Android security update available to your phone. A new security flaw has been discovered in Android — and this time, it uses Bluetooth to allow access to your phone.

The flaw, called BlueFrag, takes advantage of Bluetooth in Android 8 and 9, and it basically allows hackers to execute code on your device. The result? Hackers can fully access anything stored on your phone, and install malware without your knowledge.

Of course, this sounds a little scarier than it actually is. Because it uses Bluetooth, would-be attackers have to be within Bluetooth range of your phone, which is around 33 feet. Hackers also need to know your device’s Bluetooth MAC address — though that address is relatively easy to figure out.

Still, the flaw isn’t something you would want to be vulnerable to — and thankfully, there are ways to guard against it. The February 2020 security patch comes with a fix to the flaw, and devices running Android 10 are already safe.

And don’t assume that you’re safe if you’re running a version of Android older than Android 8. The researchers who discovered the bug said that they tested it on devices running Android 8 or later — so it’s entirely possible that the flaw can be found in older versions too. The flaw itself does exist in Android 10, but thanks to changes in how Android implements Bluetooth, it’s not exploitable. Still, it’s worth keeping up with security updates as they’re made available.

Of course, not everyone will be able to install the February 2020 security patch or the latest version of Android because of how old their phone is — and if that’s you, and you’re worried about this hack, then you may want to limit your Bluetooth use. You could, for example, try and turn Bluetooth off whenever you’re not actually using it, or switch to wired headphones and other devices instead.

While it’s always a good idea to protect yourself as much as possible from exploits like this, it’s currently unclear how many hackers are actually working to take advantage of the flaw — and we’re betting the number is pretty low.

Editors' Recommendations

Topics

Christian de Looper

Contributor

Christian’s interest in technology began as a child in Australia, when he stumbled upon a computer at a garage sale that he…

Mobile

How one of the year’s best Android phones made me a better photographer

Xiaomi 13 Pro camera lens in black and white

Photography originally established itself without color, but with the arrival of colors in the 1890s, monochrome pictures slowly disappeared. It is still practiced today but is only popular among a niche set of photographers.

As a non-photographer myself, I use smartphones to capture photos, so the art of monochrome photography was unknown to me. That is until I used the Xiaomi 13 Pro and its Leica-powered cameras, which not only introduced me to the style but made me a better photographer overall.
The many shades of monochrome

Mobile

Bing’s AI chatbot is now on your Android phone’s keyboard — here’s how to get it

Screenshots of Bing Chat running through the SwiftKey keyboard on Android.

Chatbots have become extraordinarily popular for those looking for help with their writing — or simply mess around with them and have fun. Now, Android users have access to one such chatbot straight from their keyboard. Bing Chat is Microsoft's chatbot that rivals the likes of ChatGPT and Google Bard, and it has been added as a feature to the SwiftKey keyboard, a predictive keyboard that helps with texting.

While Bing Chat can help users compose the body of a message, it can also analyze prewritten text for your tone to suggest changes if the user wants to avoid coming across a certain way. Bing Chat has already been providing those services via the Bing app and through web browsers; however, the new integration with the SwiftKey keyboard allows users to easily access the chatbot for help whenever their keyboard is enabled.
How to use Bing Chat with the SwiftKey keyboard

Mobile

These Android apps are spying on you — and there’s no easy way to stop them

Illustration of a giant eye stalking through a phone

Android’s security woes need no introduction, but another threat that hasn’t received its fair share of awareness relates to spyware and stalkerware apps. These apps can secretly be installed on a victim’s phone to monitor their activity and can be exploited to harass victims of domestic abuse and engage in online stalking. All someone needs is physical access to the victim's phone to install these apps, which is not too difficult in cases of domestic abuse.

Call it an app-fueled version of AirTag stalking, but on steroids, because these spyware apps can steal everything including messages, call logs, emails, photos, and videos. Some can even activate the microphone and the camera, and secretly transfer these recordings to a remote server where the abuser can access it. Since Google Play's policies don't allow stalking apps, these apps are sold via third-party websites and need to be sideloaded.