Bug could be used to plant malware on 99% of android phones

Started by Gary, Jul 05, 2013, 08:23:13

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Gary

A four-year-old Android bug could be used to plant malware on 99 per cent of Android devices on the market, according to security researchers.

Bluebox Security CTO Jeff Forristal said the vulnerability in Android's security model creates a means for hackers to modify an Android app's APK code without breaking its cryptographic signature.

This means that any legitimate application - even those afforded elevated privileges by the device manufacturer - could be turned into a malicious Trojan before being offered for download. The difference between the two would not be readily detectable by either the smartphone or the app store - much less an end user.

http://www.theregister.co.uk/2013/07/04/android_master_key_vuln/
Damned, if you do damned if you don't

Simon

Simon.
--
This post reflects my own views, opinions and experience, not those of IDNet.

Gary

Damned, if you do damned if you don't

Technical Ben

99% of all software can become susceptible to the big bug sitting in the chair. ;)
I use to have a signature, then it all changed to chip and pin.

Gary

Quote from: Technical Ben on Jul 05, 2013, 17:50:18
99% of all software can become susceptible to the big bug sitting in the chair. ;)
Very true with this bug then maybe 99.9% recurring  ;)
Damned, if you do damned if you don't

Technical Ben

I use to have a signature, then it all changed to chip and pin.