Predict your next investment

Corporation
INTERNET | Internet Software & Services / Monitoring & Security
f-secure.com

See what CB Insights has to offer

Founded Year

1988

Stage

Acquired | Acquired

Valuation

$0000 

About F-Secure

F-Secure is an online security and privacy company from Finland. The company offers millions of people around the globe the power to surf invisibly and store and share stuff, safe from online threats.

F-Secure Headquarter Location

Tammasaarenkatu 7

Helsinki, 00181,

Finland

+358-9-2520-0700

Latest F-Secure News

Security Researchers Crack Bluetooth-enabled Home COVID Test to Deliver Fake Results

Dec 22, 2021

Copy Security vendor F-Secure has faked a COVID test result on a Bluetooth-equipped home COVID Test. Thankfully the vendor’s since fixed the device. The firm tested the Ellume COVID-19 Home Test , a device selected specifically because it uses a “Bluetooth connected analyzer for use with an app on your phone.” As F-Secure probed the device and its companion app, its researchers spotted an un-exported activity called com.ellumehealth.homecovid.android/com.gsk.itreat.activities.BluetoothDebugActivity Users with root level access to an Android machine can launch that activity to “help interact with the analyzer over Bluetooth”, F-Secure found. Further footling found two types of Bluetooth traffic related to communicating test results. F-Secure’s researchers were able to mess with those, as follows: By changing only the byte value representing the "status of the test" in both STATUS and MEASUREMENT_CONTROL_DATA traffic, followed by calculating new CRC and checksum values, it was possible to alter the COVID test result before the Ellume app processes the data. It gets worse: faked data produced by Ellume unit was happily ingested by an outfit named Azova that certifies the results of COVID tests so that travelers can enter the USA. F-Secure’s post details a test in which one of its staff used the Ellume device to test for COVID, produced a negative result, but used the methods above to falsify the results. Further analysis of results to flag spoofed data Additional obfuscation and OS checks in the Android app F-Secure has shared its work on GitHub . Alan Fox, Ellume's head of information systems, sent the following statement to The Register: “Ellume has updated our system to detect and prevent the transmission of falsified results. In addition, we have analyzed all results to-date and confirmed no other results were impacted. We will also deliver a verification portal to allow authorities – including health departments, employers, schools, event organizers and others – to verify the authenticity of the Ellume COVID-19 Home Test." “Our test is already one of the most secure on the market and thanks to F-Secure’s insights, our ECHT is now even more secure – particularly compared to currently available non-digital tests, which can be easily falsified simply by putting soda or water on the test without requiring any specialized skills. Ellume is confident in the reliability of our ECHT test result, and we would like to thank F-Secure for bringing this issue to our attention and for the work they do every day to protect consumers, businesses and organizations around the globe." ® Share

Predict your next investment

The CB Insights tech market intelligence platform analyzes millions of data points on venture capital, startups, patents , partnerships and news mentions to help you see tomorrow's opportunities, today.

Expert Collections containing F-Secure

Expert Collections are analyst-curated lists that highlight the companies you need to know in the most important technology spaces.

F-Secure is included in 2 Expert Collections, including Cybersecurity.

C

Cybersecurity

4,814 items

C

Conference Exhibitors

5,302 items

F-Secure Patents

F-Secure has filed 149 patents.

The 3 most popular patent topics include:

  • Computer network security
  • Computer security
  • Malware
patents chart

Application Date

Grant Date

Title

Related Topics

Status

3/18/2019

11/30/2021

Computer network security, Computer security, Malware, Computer security exploits, Spyware

Grant

Application Date

3/18/2019

Grant Date

11/30/2021

Title

Related Topics

Computer network security, Computer security, Malware, Computer security exploits, Spyware

Status

Grant

CB Insights uses Cookies

CBI websites generally use certain cookies to enable better interactions with our sites and services. Use of these cookies, which may be stored on your device, permits us to improve and customize your experience. You can read more about your cookie choices at our privacy policy here. By continuing to use this site you are consenting to these choices.