---
id: 3858
title: "Invasion of the Face Changers: Halloween Hijinks with Bluetooth LED Masks"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/invasion-of-the-face-changers-halloween-hijinks-with-bluetooth-led-masks"
published_at: "2025-10-30 00:00"
tags: ["reverse-engineering", "hardware-hacking", "iot-security", "ble-security", "led-mask", "white-labeling"]
phying_url: "https://phying.com/item/3858"
lang: en
---

# Invasion of the Face Changers: Halloween Hijinks with Bluetooth LED Masks

## Summary

A Bluetooth LED mask with no pairing or authentication, white-labeled across brands, can be hijacked by anyone nearby; the AES key is public on GitHub, and a CircuitPython script can push new faces.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2025-10-30 00:00
- **Original:** https://bishopfox.com/blog/invasion-of-the-face-changers-halloween-hijinks-with-bluetooth-led-masks
- **Phying News:** https://phying.com/item/3858