Scary new malware can take over your Android phone and you won’t even know it

[Techlord]

Scary new malware can take over your Android phone and you won’t even know it

Quote

 

Described as a “Cloak and Dagger” attack by researchers from UC Santa Barbara and Georgia Tech, the malware would let a malicious app gain complete control of an Android phone or tablet. The user, meanwhile, would not suspect anything, and the malware would even be able to perform tasks with the screen turned off.

“These attacks only require two permissions that, in case the app is installed from the Play Store, the user does not need to explicitly grant and for which [the user] is not even notified,” the researchers explained. “The possible attacks include advanced clickjacking, unconstrained keystroke recording, stealthy phishing, the silent installation of a God-mode app (with all permissions enabled), and silent phone unlocking + arbitrary actions (while keeping the screen off).”

All Android versions to date, including Android 7.1.2, which is the latest stable version of Android, are at risk to this type of attack, according to the researchers.

Hackers exploiting these vulnerabilities would be able to record everything you type on the phone, including passwords and private messages. They would be able to steal PINs, unlock the device while keeping the screen off, and even steal two-factor authentication tokens.

 

 

Quote

The full paper describing Cloak and Dagger is available at this link.

 

 

[Kurapica]

damn it !

I'm back to this