Yes, Bluetooth can be hacked. While using this technology has offered a lot of creature comforts, it has also exposed people to cyberattacks.

Almost all devices are Bluetooth enabled—from smartphones to cars. People are surrounded by this technology every single day. But what many don’t realize is that using a Bluetooth connection comes with a host of security and privacy risks.

How Bluetooth Hacking Happens

Bluetooth allows devices to link to each other over very short distances, often for a short period only. As such, most Bluetooth hackers rely on getting within a close range of a target and performing the attack in a limited time frame. Crowded public areas are known hotspots for Bluetooth hackers. Especially those places where people tend to stay for longer (i.e. coffee shops).

When the target moves out of range, it might seem like it's game over for the attacker. It is important to note that some attacks can be carried out even from hundreds of feet away. So moving a few feet isn’t exactly moving out of range.

Related: How Does Bluetooth Work?

Some cybercriminals have also found a way to hack into a device’s Bluetooth connection and take control of the device, all in just 10 seconds. What’s even more alarming is that hackers can do this without interacting with the user.

Three Types of Bluetooth Attacks

There are three main types of Bluetooth-based attacks. They differ depending on their tactics and the severity of damage they can cause.

Bluejacking is the least harmless out of these attacks. It involves sending unsolicited and often anonymous messages to Bluetooth-enabled devices within a certain range. It works more like a prank call that’s meant to annoy, although you might also get NSFW messages.

Bluejacking does not generally cause as much damage as other attacks since it doesn’t involve taking control of the device or gaining access to any of its files.

Bluesnarfing is a bit more complicated and sinister. This attack uses a phone’s Bluetooth connection to steal information stored in the device. Hackers can access a device from up to 300 feet away without leaving any trace. During the attack, cybercriminals can access and steal contact information, emails, calendar entries, passwords, photos, and other Personally Identifiable Information (PII).

Bluebugging is the most malicious type of Bluetooth hacking. During the attack, a skilled hacker can get full access and control of the device. This is done by setting up a backdoor on the victim’s system. It can be used to spy on the victim by listening in on phone conversations and intercepting or rerouting communication (like forwarding the victim’s calls to the attacker).

During a Bluebugging attack, a hacker can read SMS messages and reply to them. They can make calls, and gain access to online accounts or apps without alerting the device owner.

What Is BlueBorne?

BlueBorne is an attack vector detected in 2017 by security firm Armis. It is spread through the air (i.e. airborne) and hacks devices via Bluetooth. It doesn’t need to pair with the target device and worse, it doesn’t even need for the device to be discoverable. Virtually all mobile devices with Bluetooth technology are susceptible.

It gives hackers full control of the device and can be used to access corporate data and networks. According to the Armis report, it can penetrate secure “air-gapped” networks and spread malware to devices that are within range.

BlueBorne can be used for cyberespionage, data breaches, ransomware campaigns, and even to make botnets out of other devices.

While patches have been rolled out for affected devices, BlueBorne showed how easily hackers can exploit Bluetooth technology and how much damage this can cause.

How To Protect Yourself From Bluetooth Hackers

Here are a few ways to protect yourself from hackers who are trying to gain access to your device via Bluetooth.

Turn Your Bluetooth Off

If you leave your Bluetooth on, it will keep looking for an open device within a range that it can connect with. Hackers wait for unsuspecting users who either forget to turn their Bluetooth off or leave it on for long periods.

Turn it off if you don't need it, especially if you're in a public area.

Don’t Share Sensitive Information

Considering this technology’s vulnerabilities, and more yet to be discovered, it’s best to avoid sharing sensitive information via Bluetooth. This includes bank information, passwords, private photos, and other PII.

Change Bluetooth Settings To “Not Discoverable”

Many attacks target Bluetooth devices that are within range and are discoverable. This is how they locate and zero in on the ones they can infiltrate. There are cybercriminals who have worked around this and are now able to attack even Bluetooth devices that are not discoverable. However, these attacks are rarer, so you're limiting hackers' options.

Be Careful Who You Pair With

Do not accept pairing requests unless you are sure it's with a device you want to link to. This is how hackers gain access to the information in your device.

Avoid Pairing Devices in Public

Crowded public places are hotspots for hackers. If you must pair a device for the first time, make sure you do it at home, in the office, or in a secure area. This is to make sure hackers don’t detect your Bluetooth device while you have made it discoverable while pairing.

RELATED: Bluetooth Not Working in Windows 10? 10 Ways to Fix Pairing Problems

Don’t Forget To Unpair

If a Bluetooth device that you have previously paired with gets lost or stolen, make sure you remove it from your list of paired devices. In fact, you should do this with all the Bluetooth devices this stolen or lost gadget was previously connected to.

Install Patches and Updates

Gadgets are often rolled out with unknown vulnerabilities. These will only be discovered once buyers start using them. This is why companies release patches and critical updates for software.

Updates repair security flaws that have recently been discovered and fix bugs. Installing them helps keep hackers out.

Keeping Hackers Out

Yes Bluetooth hacking can cause a lot of damage, but you can take steps to prevent it.

Using this technology comes with a lot of security and privacy risks. So turn your Bluetooth off when you’re not using it. Don’t ever pair with unknown devices. And always make sure you’re on top of your device’s updates or patches.