CAPEC-626 — Smudge Attack
CAPEC-626: Smudge Attack
MITRE CAPEC attack pattern
| Status | Draft |
| Typical severity | — |
| Likelihood of attack | — |
| Catalogue | CAPEC 3.9 (2023-01-24) |
Description
Attacks that reveal the password/passcode pattern on a touchscreen device by detecting oil smudges left behind by the user’s fingers.
Prerequisites
- The attacker must have physical access to the device.
Skills required
- Medium: The attacker must know how to make use of these smudges.
Consequences
- Access Control: Bypass Protection Mechanism
Mitigations
- Strong physical security of the device.