Security researchers have developed a new attack named “BrutePrint” that uses 15$ hardware to exploit vulnerabilities to unlock fingerprint biometrics in Android smartphones. Phones were connected to 15$ circuit board. It uses a Database of fingerprints to attempt to unlock the phone unlimited times using the available fingerprint data.
It was tested on 10 smartphones:
Mi 11 Ultra, Vivo X60 Pro, OnePlus 7 Pro, OPPO Reno Ace, Samsung Galaxy S10 Plus, OnePlus 5T, HUAWEI Mate 30 Pro 5G, HUAWEI P40, Apple iPhone SE, and Apple iPhone 7.
The amount of time to unlock each phone was different as it depends on various factors such as security framework, no. of fingerprints stored, etc. In this “Specific” case, Galaxy S10 Plus took last time (45 minutes – 3hrs) while Mi 11 Ultra took the max time (3 hrs – 14hrs). iPhones were immune to attack.