Many mobile operating systems are equipped with a function that enables push messages and messages from activated widgets to be displayed on the lock screen. A user's confidential information may thus be disclosed to and exploited by unauthorised third parties. Voice assistants can also be used to access telephone functions and contact data even when a device is locked. This may also allow unauthorised third parties to access sensitive information.
In addition, it is often possible to configure interfaces such as WLAN or Bluetooth even when a device is locked. An attacker with physical access to a device could open up an additional attack vector by activating the device's Bluetooth interface, for example.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)