Samsung Galaxy S5 fingerprint Scanner hacked, Paypal users at risk[video]

Researchers are claiming that the sensor of the Galaxy S5 can be hacked using a fingerprint spoof. It's fingerprint scanner was put to test by researchers at Germany's Security Research Labs. The researchers took a fake fingerprint or a spoof of the original print and were easily able to hack the scanner.

SRLabs has released a video demonstrating how a hacker can breach the fingerprint security of Samsung Galaxy S5. The researcher uses a 'wood glue spoof' made from a mold, which was used in spoofing attempt of Apple's iPhone 5S last year, to bypass Galaxy S5's fingerprint lock, according to the video.

"Despite being one of the flagship features of Galaxy S5, Samsung's implementation of fingerprint authentication leaves much to be desired," the firm said. "Perhaps most concerning is that Samsung does not seem to have learned from what others have done poorly."

SRLabs says that the implementation of fingerprint scanner in Galaxy S5 is even more shoddy than what was found in iPhone 5S. Apple requires a password after every reboot before users can unlock their iPhone 5S with fingerprint scanner. It also requires a password after a certain number of failed attempts with fingerprint scanner.

But in the case of Galaxy S5, users can make any number of attempts to unlock the device with fingerprint scanner. Also, a reboot doesn't lock the fingerprint scanning feature.


As you can see in the clip, immediately after getting to device to detect his print, the ‘hacker’ duplicates it by pressing the finger being used into some sort of rubber material. And guess what, swiping this mold across the scanner unlocks the handset smoothly.

Of course, it would be a tougher job for a would-be hacker to lift your fingerprint from a surface you left it on and then use it to unlock your Samsung Galaxy S5. But the point is, it’s not an impossible task.