Behavioral Biometrics Could Strengthen Authentication as Biometric Spoofing Advances

Summary

ThreatFabric discusses Android banking trojans that reportedly downgrade biometric checks to PINs and explains how behavioral biometrics could provide passive authentication, while noting risks such as false positives.

Key points

• ThreatFabric researchers say recent Android banking trojans can bypass fingerprint or face authentication by falling back to PIN-based checks.
• The article says cloned voices and improving deepfakes challenge confidence in conventional biometric authentication.
• Liveness checks may assess facial movement, texture, and video metadata for signs of manipulation.
• Behavioral biometrics, such as gait and typing patterns, could provide passive authentication signals that are harder to spoof or socially engineer.
• Behavioral signals can produce false positives because a person's behavior varies with their emotional state; combining them with device-related data may help reduce them.
• The article advocates continuous, adaptive risk assessment using multiple signals rather than relying mainly on point-in-time authentication gates.

People