Security News > 2022 > April > Issue in digital COVID-19 test could have allowed individuals to falsify results

WithSecure and Cue Health have worked together to address a security issue that WithSecure discovered in Cue's COVID-19 test, which delivers the results of a nasal swab test via bluetooth to a mobile device.

The COVID-19 test is a molecular test that offers users results in 20 minutes with accuracy that's comparable to PCR tests performed in labs.

"I was able to change my negative test result to a positive by intercepting and changing the data as it was transmitted from Cue's reader to the mobile app on my phone. And I got my test result certified by performing a proctored test within the platform's Health App," explained Gannon.

The COVID-19 test utilizes two different pieces of equipment: a test kit, and a Cue Reader.

Gannon shared his research with Cue Health, who responded promptly, initiated an investigation, and swiftly implemented security improvements to prevent the future falsification of test results.

"Thanks to WithSecure's help, we confirmed that highly skilled individuals with cyber security expertise could change a test result, and we swiftly issued a software update to fix this issue to detect the falsification of COVID-19 test results in the Cue Health App," said Vimal Subramanian, VP of Information Security and Privacy at Cue Health.

News URL

https://www.helpnetsecurity.com/2022/04/22/swab-test-mobile-device/