To understand how this attack is done, it’s important to first know how Bluetooth works. Devices that are Bluetooth-capable communicate with each other using the so-called Object Exchange (OBEX) protocol.
The OBEX protocol has inherent security vulnerabilities that attackers can exploit using tools such as Bluediving. With it, attackers can look for Bluetooth-enabled devices and pair with these without their owners’ knowledge.
If they have programming skills, the attackers can create their own bluesnarfing tool. However, even those who don’t know how to code can still use bluesnarfing to steal data. There are ready-to-use attack tools available online. There are also bluesnarfer-for-hire services that they can employ