How Hackers are Using Malware to Steal Fingerprints and Sensitive Data

Hello!

Over the past couple of years leading up to 2026, the usage and complexity of malware have increased, although technology specialists and investigators have so far managed to stay one step ahead.

According to Symantec’s experts, by 2026 the pace of malware development will significantly outstrip previous advances, creating challenges given the longer release cycles of operating systems and browsers.

Are malware technologies evolving that rapidly? Are current security solutions robust enough to counter them? The honest answer is that no one really knows for certain.

Examining recent developments in computing paints an unsettling picture: malware could eventually reach a point where conventional cyber defenses struggle to keep up.

Malware operates in a highly competitive environment. Each strain vies to infect the largest possible share of devices, with malware authors constantly competing against one another.

How Hackers Steal Fingerprints

There are multiple ways to obtain fingerprints. This article examines the three most common methods hackers use to compromise identities and capture fingerprint-related data.

Method #1: Mold the Targeted Fingerprint

A fingerprint mold can be created while the victim is unaware or unconscious, using any soft material such as modeling clay. The intruder then uses this mold to produce a fake fingertip. The main limitation is that the attacker must be physically present and have access to the victim.

Method #2: Capture a Fingerprint via Scanner

Another approach involves obtaining a fingerprint directly from a scanner. While technically more demanding, not all organizations store biometric data securely, meaning scanned fingerprints are sometimes available for purchase on the darknet. The resulting flat image is converted into a 3D model for printing on a 3D printer.

Researchers encountered several challenges: difficulties calibrating dimensions in the design software, shrinkage of the photopolymer after heating, and the final material proving too rigid to deceive scanners. Ultimately, they printed a cast instead and created a prosthetic finger from a more flexible material.

Method #3: Photograph the Fingerprint on a Glass Surface

The simplest technique involves photographing a fingerprint left on a glass surface, as demonstrated with the iPhone 6 fingerprint scanner. The image is enhanced for transparency and sent to a 3D printer. Calibration required extensive trial and error, with each model taking approximately 50 minutes to print.

Consequently, creating a convincing fake fingerprint to unlock a stolen smartphone is neither quick nor straightforward. Selecting the right material for the replica proved equally challenging, as different sensors (optical, capacitive, ultrasonic) respond to different properties. Inexpensive fabric glue, however, works effectively for many imitation prints.

Which Devices Were Unlocked Using Fake Fingerprints

The researchers tested their replicas on smartphones, tablets, laptops, a smart lock, and two USB drives with fingerprint protection: the Verbatim Fingerprint Secure and the Lexar Jumpdrive Fingerprint F35. All three methods performed well on most devices.

The Samsung A70 resisted unlocking. Devices running Windows 10 also proved resistant, likely because the operating system handles fingerprint matching rather than third-party software. Ultrasonic scanners were the easiest to bypass, as they often accepted the 3D replicas without additional verification.

How Secure Are Your Fingerprint Sensors

In one demonstration, the head of X-Lab, Chen Yu, asked volunteers to touch a bottle. Latent fingerprints were captured with a smartphone and processed in custom software to generate 3D-printable data. The resulting replicas successfully unlocked three different smartphones in front of an audience within about 20 minutes, defeating capacitive, optical, and ultrasonic sensors.

Also read: Google Launches Stitch: A Free Website and App Generator Now Available to All

Beware of Uncertainty

While the future trajectory of malware remains uncertain, the risks are real and growing. Organizations may need to consider stronger alternatives such as facial recognition for biometric authentication. Firewalls, antivirus, anti-spyware tools, and identity-theft protection services continue to provide valuable layers of defense, yet their long-term sufficiency is still an open question.

Thank you!
Join us on social networks!
See you!