Privacy Ninja



        • Secure your network against various threat points. VA starts at only S$1,000, while VAPT starts at S$4,000. With Price Beat Guarantee!

        • API Penetration Testing
        • Enhance your digital security posture with our approach that identifies and addresses vulnerabilities within your API framework, ensuring robust protection against cyber threats targeting your digital interfaces.

        • On-Prem & Cloud Network Penetration Testing
        • Boost your network’s resilience with our assessment that uncovers security gaps, so you can strengthen your defences against sophisticated cyber threats targeting your network

        • Web Penetration Testing
        • Fortify your web presence with our specialised web app penetration testing service, designed to uncover and address vulnerabilities, ensuring your website stands resilient against online threats

        • Mobile Penetration Testing
        • Strengthen your mobile ecosystem’s resilience with our in-depth penetration testing service. From applications to underlying systems, we meticulously probe for vulnerabilities

        • Cyber Hygiene Training
        • Empower your team with essential cybersecurity knowledge, covering the latest vulnerabilities, best practices, and proactive defence strategies

        • Thick Client Penetration Testing
        • Elevate your application’s security with our thorough thick client penetration testing service. From standalone desktop applications to complex client-server systems, we meticulously probe for vulnerabilities to fortify your software against potential cyber threats.

        • Source Code Review
        • Ensure the integrity and security of your codebase with our comprehensive service, meticulously analysing code quality, identifying vulnerabilities, and optimising performance for various types of applications, scripts, plugins, and more

        • Email Spoofing Prevention
        • Check if your organisation’s email is vulnerable to hackers and put a stop to it. Receive your free test today!

        • Email Phishing Excercise
        • Strengthen your defense against email threats via simulated attacks that test and educate your team on spotting malicious emails, reducing breach risks and boosting security.

        • Cyber Essentials Bundle
        • Equip your organisation with essential cyber protection through our packages, featuring quarterly breached accounts monitoring, email phishing campaigns, cyber hygiene training, and more. LAUNCHING SOON.

Biometric Auth Bypassed Using Fingerprint Photo, Printer, and Glue

Biometric Auth Bypassed Using Fingerprint Photo, Printer, and Glue

Researchers demonstrated that fingerprints could be cloned for biometric authentication for as little as $5 without using any sophisticated or uncommon tools.

Although fingerprint-based biometric authentication is generally considered superior to PINs and passwords in terms of security, the fact that imprints can be left in numerous public places makes it ripe for abuse.

It has been previously proven that there are ways to collect and use people’s fingerprints to fool even the most sophisticated sensors. However, these typically involve using niche tools such as DSLR cameras and high-fidelity 3D printers.

Also Read: How To Prevent WhatsApp Hack: 7 Best Practices

If only there was a cheap way to retrieve these imprints and convert them to usable fingerprints, it would severely and negatively impact the security of this particular authentication method.

According to the Kraken Security Labs team, there is a way to clone fingerprints using inexpensive materials, with no high-end tools involved in any step of the process.

A printer and some glue

As the team demonstrated, stealing the fingerprint is a case of photographing it with any modern smartphone and then generating the negative on a photo manipulation software.

This basic editing step is enough to adequately tone the outlines of the stolen fingerprint and prepare it for the printing step, so no high-res DSLR images are required.

For the printing step, any laser printer accepting acetate sheets would be suitable for the attack. Acetate is typically used for cards, stencils, and overlays, but it’s ideal in this case because the laser printer can etch it.

Once the printing is over, the synthetic fingerprint can come together by applying some wood glue on top of the print and letting it dry.

Also Read: 15 Best Tools For Your Windows 10 Privacy Settings Setup

Unlocking the MacBook Pro with a cloned fingerprint
Unlocking the MacBook Pro with a cloned fingerprint
Source: Kraken

Through testing, the Kraken team found that the resulting fingerprint can fool state-of-the-art fingerprint sensors such as the one used in the latest MacBook Pro.

“We were able to perform this well-known attack on the majority of devices our team had available for testing. Had this been a real attack, we would have had access to a vast range of sensitive information.” – Kraken

You shouldn’t rely on fingerprints alone

Kraken’s findings don’t mean that the end of fingerprints is near, but it’s a good reminder of why people shouldn’t treat them as a single layer of protection for their accounts.

Fingerprints are a convenient biometric authentication method, but when it comes to critical applications, they should only be used as 2FAs in conjunction with a strong password.

“A fingerprint should not be considered a secure alternative to a strong password. Doing so leaves your information — and, potentially, your cryptoassets — vulnerable to even the most unsophisticated of attackers,” explain the Kraken researchers.

As technology progresses and low-cost consumer electronics become more capable of producing high fidelity results, fingerprints will be even easier to clone.



Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!

Personal Data Protection


We have assisted numerous companies to prepare proper and accurate reports to PDPC to minimise financial penalties.


Click one of our contacts below to chat on WhatsApp

× Chat with us