Typical severity: High. Likelihood of attack: Medium. An adversary disguises the MAC address of their Bluetooth enabled device to one for which there exists an active and trusted connection and authenticates successfully. The adversary can then perform malicious actions on the target Bluetooth device depending on the target’s capabilities.
Disable Bluetooth in public places. | Verify incoming Bluetooth connections; do not automatically trust. | Change default PIN passwords and always use one when connecting.