A complete Presentation on Bluejacking :)

1. PRESENTED BY : HAMMAD KHAN
MUHAMMAD ADEEL
MUZAMMIL NAZ
MASOOD KARIM
BLUEJACKING

2. TABLE OF CONTENTS
• Bluejacking
• History
• Bluejacking technology
• Places where Bluejack occurs Stats
• How it works
• How to Prevent Being Bluejacked
• Good Practices for Bluetooth Enabled Devices
• References

3. ”
“ Section : A
Bluejacking , History , Bluejacking technology & Places
where Bluejack occurs statistics
Presented By : Masood Karim
Let’s Start

4. BLUEJACKING
• Bluejacking is a hacking method that allows an individual to send
anonymous messages to Bluetooth-enabled devices within a certain
radius.
• First, the hacker scans his surroundings with a Bluetooth-enabled
device, searching for other devices. The hacker then sends an
unsolicited message to the detected devices.
• Bluejacking is also known as blue hacking.

5. HISTORY
• “Ajack” (Malaysian IT Consultant) posted a comment on a mobile phone forum.
• Ajack told IT Web that he used his Ericsson cell phone in a bank to send a message to someone with a
Nokia 7650.
• Ajack did a Bluetooth discovery to see if there was another Bluetooth device around.
• Discovering a Nokia 7650, he created a new contact and filled in the first name with ‘Buy Ericsson! and
sent a business card to the Nokia phone.

6. BLUEJACKING TECHNOLOGY
• Bluetooth technology : Bluetooth is a wireless technology standard for exchanging data over short
distances from fixed and mobile devices, and building personal area networks
• vCard : vCard, also known as VCF (Virtual Contact File), is a file format standard for electronic business
cards. vCard are often attached to e-mail messages, but can be exchanged in other ways, such as on the
World Wide Web or instant messaging. They can contain name and address information, telephone
numbers, e-mail addresses, URLs, logos, photographs, and audio clips.
• OBEX protocol : OBEX (abbreviation of OBject EXchange, also termed IrOBEX) is a communications
protocol that facilitates the exchange of binary objects between devices. It is maintained by the Infrared
Data Association but has also been adopted by the Bluetooth Special Interest Group

7. PLACES WHERE BLUEJACK OCCURS
Home
Cafes
Public transportation
Stores and shopping malls
Restaurants
Bars
0 5 10 15 20 25 30 35

8. ”
“ Section : B
How Bluejack works , How to Prevent Being Bluejacked & Good
Practices for Bluetooth Enabled Devices
Let’s Start
Presented By : Muhammad Adeel

9. HOW DOES THIS WORKS
• Step 1 – Create a new contact on the mobile phone’s contact list.
• Step 2 – Enter a “Bluejacking” message in the name field such as, “I am a master Bluejacking specialist.”
• Step 3 – Choose the new contact and select the “Send via Bluetooth” menu option. The purpose of this
option on mobile phones is to forward contact data to others.
• Step 4 – The phone will now display a list of devices that are in its range. If the phone cannot find a
device, it just means that it is not in range of a Bluetooth enabled device. Select a contact from the
listing and send a message.
• Step 5 – If a user chooses to Bluejack other devices, he/she should be aware of the security laws in
his/her place of residence. In some locations, sending unsolicited messages via Bluejacking may be
illegal.

10. HOW TO PREVENT BEING BLUEJACKED
• To prevent being Bluejacked, disable Bluetooth on the mobile device when not in use.
• The device will not show up on a “Bluejacker’s” phone when he/she attempts to send a message and
they do not queue up.
• Buy an E2X bag: It blocks all transmissions and receiving signals from leaving the bag.

11. GOOD PRACTICES FOR BLUETOOTH ENABLED DEVICES
• Whether someone is unwilling to partake in Bluejacking or just does not want to be bothered with
these messages, the following are some good practices to consider:
• Do not reveal an identity when either sending or receiving Bluejacked messages.
• Never threaten anyone.
• Never send messages that can be considered abusive.
• Never reveal personal information in response to a Bluejacked message.
• Disable Blue Tooth while away from one’s car or home in order to prevent Bluejacked messages.
• If a Bluejacking message is received, delete the message voice accepting it or it will be added to the
device’s address book.

12. ”
“ Section : C
Bluesnarfing , Bluecasting , Bluebugging & Bluejacking Activity
Overview
Presented By : Muzammil Naz
Let’s Start

13. BLUESNARFING
• The Bluesnarfing attack is much more damaging to the bluejacking technique as it enables you to
wirelessly connect to Bluetooth enables mobile phones without any knowledge from the owner and
copy their the mobile phone's address book, their SMS messages, their call logs
• Most bluesnarfing tools are downloaded as JAR files.
• The Bluesanrfing technique works like the Bluejacking technique by making use of the exchange of
business cards. This exchange is done using the OBEX protocol and enables the Bluetooth machine to
connect to the device which needs to be compromised but instead of exchanging a business card, it
request for information (the phonebook file, the call logs etc.) from the target.

14. BLUECASTING
• Advertising to users with Bluetooth cellphones.
• As people walk within the vicinity of a store and Bluetooth is turned on in their phones, a message can
be sent to the phone that entices them to come inside.

15. BLUEBUGGING
• The Bluebugging attack is more powerful than the bluejacking and bluesnarfing attacks.
• It allows the attacker to take complete control of your mobile phone without the user knowing
anything about it.
• They can make phone calls, listen to conversations where the phone is located. Bluesanrfing capabilities
also exist in bluebugging tools like copying the phone book and the phone's call list.

16. HOW TO BLUEJACK 
• 1. Find a busy place where lots of mobile phones might be, such as shopping centres, trains, bars or
cinemas
• 2. Create a new entry in your phone's address book like 'Hi you've been bluejacked'. Attach a picture if
you want to.
• 3. Search the area for other Bluetooth phones to contact and choose one.
• 4. Send your message. They then receive the message, 'Hi you've been bluejacked'.
• 5. Keep a look out for when your 'victim' gets the message and the puzzled look on their face.

17. ”
“ Section : D
Security Tips to prevent attacks , Uses of Bluejacking & Code Of
Ethics
Presented By : Hammad Khan Laghari
Let’s Start

18. SECURITY TIPS TO PREVENT ATTACKS ON MOBILE PHONES:
• Enable Passcode Lock on Your phone
• The most basic precaution you can take is to enable passcode lock and set it to automatically engage after a brief period
of inactivity. By default, a passcode is not required to unlock the phone.
• Most people would put off this security measure for ease of use and convenience. However, the truth is that once you
have it enabled, it becomes second nature and you would not notice any difference. It is recommended that you set a
strong passcode. In the event of a physical theft, this will increase the effort required to compromise your phone.
• Disable Features That Could Be Accessed Without Entering the Passcode
• This would prevent the use of applications from your phone without your knowledge.
• Disable geotagging on the phone.
• This will prevent attackers find out where you are located.

19. CONTINUE
• Erase All the Data Before Return, Repair, or Resale of Your phone.
• Erase all confidential information so that attackers cannot retrieve your personal information.
• Regularly Update the phone's Firmware or Operating system.
• This will enable you to get the latest security features for your mobile phones.
• Disable Bluetooth When Not in Use
• Disabling Bluetooth when not in use will prevent attackers from getting access to you phone when not in use.

20. USES OF BLUEJACKING
• Busy shopping center
• Starbucks
• Train Station
• High Street
• On a train/ tube/ bus
• Cinema
• Café/ restaurant/ pub
• Mobile phone shop
• Electronics shop (e.g. Dixons)

21. REFERENCES
• http://www.tech-faq.com/bluejacking.html
• https://electronics.howstuffworks.com/bluejacking.html
• https://en.wikipedia.org/wiki/Bluejacking
• https://www.slideshare.net/aemankhan/bluejackingppt
• http://www.yourdictionary.com/bluecasting#c7lBmFCt5Lx57ZpF.99

22. ”
“Thank You Everyone Hope You’ve Find Useful Information

Presenter : Hammad Khan , Muhammad Adeel , Muzammil Naz & Masood Karim
Technology is a useful servant but a dangerous master.

23. FOR PRESENTER INFORMATION
• Bluetooth Special Interest Group (SIG) is the body that oversees the development of Bluetooth
standards and the licensing of the Bluetooth technologies and trademarks to manufacturers
• The Bluetooth protocol stack is split in two parts: a "controller stack" containing the timing critical radio
interface, and a "host stack" dealing with high level data. The controller stack is generally implemented
in a low cost silicon device containing the Bluetooth radio and a microprocessor. The host stack is
generally implemented as part of an operating system, or as an installable package on top of an
operating system.

24. FOR PRESENTER INFORMATION
• Connection Type Spread Spectrum (Frequency Hopping) & Time Division Duplex (1600 hops/sec)
• Spectrum 2.4 GHz ISM Open Band (79 MHz of spectrum = 79 channels)
• Modulation Gaussian Frequency Shift Keying Transmission Power 1 mw – 100 mw
• Data Rate 1 Mbps Range 30 ft Supported Stations 8 devices
• Data Security –Authentication Key 128 bit key
• Data Security –Encryption Key 8-128 bits (configurable) Module size 9 x 9 mm