Invasion of the Face Changers: Halloween Hijinks with Bluetooth LED Masks
bishopfox.com | blog | #reverse-engineering | #hardware-hacking | #iot-security | #ble-security | #led-mask | #white-labeling
Summary
A Bluetooth LED mask with no pairing or authentication, white-labeled across brands, can be hijacked by anyone nearby; the AES key is public on GitHub, and a CircuitPython script can push new faces.
- Published
- Collected
--- id: 3858 title: "Invasion of the Face Changers: Halloween Hijinks with Bluetooth LED Masks" source_domain: bishopfox.com source_url: "https://bishopfox.com/blog/invasion-of-the-face-changers-halloween-hijinks-with-bluetooth-led-masks" published_at: "2025-10-30 00:00" tags: ["reverse-engineering", "hardware-hacking", "iot-security", "ble-security", "led-mask", "white-labeling"] phying_url: "https://phying.com/item/3858" lang: en --- # Invasion of the Face Changers: Halloween Hijinks with Bluetooth LED Masks ## Summary A Bluetooth LED mask with no pairing or authentication, white-labeled across brands, can be hijacked by anyone nearby; the AES key is public on GitHub, and a CircuitPython script can push new faces. ## Intelligence Metadata - **Sources:** bishopfox.com - **Published:** 2025-10-30 00:00 - **Original:** https://bishopfox.com/blog/invasion-of-the-face-changers-halloween-hijinks-with-bluetooth-led-masks - **Phying News:** https://phying.com/item/3858