https://www.techtarget.com/whatis/feature/Flipper-Zero-explained-What-to-know-about-the-viral-hacker-tool
Wireless signals are everywhere. Phones, Wi-Fi networks and bank cards are just a few technologies that use wireless signals to communicate. Hacking them typically requires some cybersecurity knowledge, but Flipper Zero makes it a cinch.
Flipper Zero is a toy-like portable hacking tool. The multi-tool is marketed to "geeks," red team hackers and pen testers to expose vulnerabilities in the world around them, like a cybersecurity X-ray. The tool is open source and completed a successful Kickstarter in 2020.
The tool gained popularity on TikTok when it appeared in a flurry of videos from hackers and script kiddies playing pranks in public. In the videos, hackers turn off the electronic menus at fast food restaurants, remotely open the charging ports of strangers' Teslas and even change the gas prices on gas station displays. The hackers simply point the device at the target system like a remote control, press a button or two, and the target screen turns off, the display numbers change or the charging port opens.
These videos make Flipper Zero out to be a skeleton key for IoT, but this is an exaggeration. Most of the videos were likely staged, requiring significant preparation to pull off.
The gadget is still a powerful and intuitive tool to investigate cybersecurity in the physical world. Although it can't manipulate every wireless device in its path, it can read the signals wireless devices emit. With this capability, it can reveal a significant amount of information about a spectrum of electronic devices, even if it can't really change gas prices at the click of a button. For example, it can do the following:
Flipper Zero contains a few different antennas. These help it capture, store, clone and emulate wireless signals. It can interact with several signal types:
To read a wireless signal, the user holds Flipper Zero up to source of the signal, selects the program that corresponds to the signal type, and selects "Read." Flipper Zero then saves the signal type to memory. The user can access the saved signal and emulate it. Flipper Zero doesn't allow users to save and emulate NFC bank cards, but it can read them.
Part of Flipper Zero's appeal is its versatility. Three simple hacks showcase Flipper Zero's capabilities via radio signal communication and other means. It can unlock a car that uses a radio fob, control a TV that uses infrared and create a two-factor authentication token for websites.
Flipper Zero also features the following:
Flipper Zero has potential to be a security threat in the wrong hands. However, it is not inherently dangerous. To engineer a security attack would take a fair amount of planning and intent. Flipper Zero is better suited to light pen testing activities and general reconnaissance to gain awareness of the digital environment. For novice hackers, pen testing is the act of intentionally finding vulnerabilities in a computer system to fix the vulnerabilities and make the system stronger.
Flipper Zero is a learning tool primarily, designed to make cybersecurity information more accessible and change the way users think of the digital devices around them. Much of the technology and techniques Flipper Zero uses have been around for years. Flipper Zero just makes them slightly more accessible and user friendly.
Flipper Zero reported on its social media channels that U.S. Customs and Border Patrol seized a shipment of Flipper Zeros in September 2022. Despite this event, the device is legal. It simply has the potential to be used illegally.
Flipper Zero shouldn't be used to tamper with devices or systems that the user doesn't have permission to access.
The device's firmware prevents users from transmitting frequencies that are banned in the country where they are using it.
Flipper Zero is banned on Amazon because it was tagged as a card-skimming device. There is a third-party Flipper locator application that lets people monitor Flipper restocks by country and vendor.
Flipper Zero is just one hacking gadget. While Flipper Zero can perform a range of actions, there are many products and software that can also perform one or several of those same functions:
The gadget was originally sold for $169 by the manufacturer. However, the device is often sold out and only available through third-party vendors, increasing the price. There are also many scammers that claim to be selling Flipper Zero when they aren't. It's best to only buy Flipper Zero through a reputable distributor.
Flipper Zero generally works on devices and systems that were vulnerable to begin with. Learn how to fix five of the most common cybersecurity vulnerabilities to prevent data loss and hacking.
02 Mar 2023