Editing Bluetooth (section)

==== 2005 ====
In January 2005, a mobile [[malware]] worm known as Lasco surfaced. The worm began targeting mobile phones using [[Symbian OS]] ([[S60 (software platform)|Series 60 platform]]) using Bluetooth enabled devices to replicate itself and spread to other devices. The worm is self-installing and begins once the mobile user approves the transfer of the file (Velasco.sis) from another device. Once installed, the worm begins looking for other Bluetooth enabled devices to infect. Additionally, the worm infects other [[.SIS]]&nbsp;files on the device, allowing replication to another device through the use of removable media ([[Secure Digital]], [[CompactFlash]], etc.). The worm can render the mobile device unstable.<ref>{{cite web
 |url          = http://www.f-secure.com/v-descs/lasco_a.shtml
 |title        = F-Secure Malware Information Pages: Lasco.A
 |publisher    = F-Secure.com
 |access-date   = 5 May 2008
|archive-url  = https://web.archive.org/web/20080517091014/http://www.f-secure.com/v-descs/lasco_a.shtml
 |archive-date = 17 May 2008
|url-status     = dead
}}</ref>

In April 2005, [[University of Cambridge]] security researchers published results of their actual implementation of passive attacks against the [[Personal identification number|PIN-based]] pairing between commercial Bluetooth devices. They confirmed that attacks are practicably fast, and the Bluetooth symmetric key establishment method is vulnerable. To rectify this vulnerability, they designed an implementation that showed that stronger, asymmetric key establishment is feasible for certain classes of devices, such as mobile phones.<ref>{{cite web
|author1=Ford-Long Wong |author2=Frank Stajano |author3=Jolyon Clulow |date=April 2005
|title=Repairing the Bluetooth pairing protocol
|publisher=University of Cambridge Computer Laboratory
|url=http://www.cl.cam.ac.uk/~fw242/publications/2005-WongStaClu-bluetooth.pdf
|access-date=1 February 2007
|archive-url = https://web.archive.org/web/20070616082657/http://www.cl.cam.ac.uk/~fw242/publications/2005-WongStaClu-bluetooth.pdf <!-- Bot retrieved archive --> |archive-date = 16 June 2007}}</ref>

In June 2005, Yaniv Shaked<ref>{{cite web |url=http://www.eng.tau.ac.il/~shakedy |title=Yaniv Shaked's Homepage |access-date=6 November 2007 |url-status=dead |archive-url=https://web.archive.org/web/20071109192150/http://www.eng.tau.ac.il/~shakedy/ |archive-date=9 November 2007 }}</ref> and Avishai Wool<ref>{{cite web|url=http://www.eng.tau.ac.il/~yash/|title=Avishai Wool – אבישי וול|website=tau.ac.il|access-date=4 June 2015|archive-date=23 December 2018|archive-url=https://web.archive.org/web/20181223163419/http://www.eng.tau.ac.il/~yash/|url-status=live}}</ref> published a paper describing both passive and active methods for obtaining the PIN for a Bluetooth link. The passive attack allows a suitably equipped attacker to eavesdrop on communications and spoof if the attacker was present at the time of initial pairing. The active method makes use of a specially constructed message that must be inserted at a specific point in the protocol, to make the master and slave repeat the pairing process. After that, the first method can be used to crack the PIN. This attack's major weakness is that it requires the user of the devices under attack to re-enter the PIN during the attack when the device prompts them to. Also, this active attack probably requires custom hardware, since most commercially available Bluetooth devices are not capable of the timing necessary.<ref>{{cite web
|author1=Yaniv Shaked
|author2=Avishai Wool
|date=2 May 2005
|title=Cracking the Bluetooth PIN
|publisher=School of Electrical Engineering Systems, Tel Aviv University
|url=http://www.eng.tau.ac.il/~yash/shaked-wool-mobisys05/
|access-date=1 February 2007
|archive-date=23 December 2018
|archive-url=https://web.archive.org/web/20181223163532/http://www.eng.tau.ac.il/~yash/shaked-wool-mobisys05/
|url-status=live
}}</ref>

In August 2005, police in [[Cambridgeshire]], England, issued warnings about thieves using Bluetooth enabled phones to track other devices left in cars. Police are advising users to ensure that any mobile networking connections are de-activated if laptops and other devices are left in this way.<ref>{{cite news
|title=Phone pirates in seek and steal mission
|newspaper=Cambridge Evening News
|url=http://www.cambridge-news.co.uk/news/region_wide/2005/08/17/06967453-8002-45f8-b520-66b9bed6f29f.lpf
|archive-url=https://web.archive.org/web/20070717035938/http://www.cambridge-news.co.uk/news/region_wide/2005/08/17/06967453-8002-45f8-b520-66b9bed6f29f.lpf
|archive-date=17 July 2007
|access-date=4 February 2008
}}</ref>