Sunday, August 09, 2015

Millions of Android phones at risk from software installed by handset makers: 'Certifi-gate' flaw could let hackers listen in on conversations and steal data...

Millions of Android phones could be easily hijacked using software that was installed on them by their manufacturers, hackers have claimed.

The same 'remote support' apps loaded on phones and tablets made by HTC, LG, Samsung, and ZTE and many other manufacturers are vulnerable to the hack.

The apps are given special access to the phone, using digital certificates, which hackers can break into and then use.

Exploiting the privileges could let people 'steal personal data, track device locations, turn on microphones to record conversations', according to Check Point, the security firm that found the hack have named it it 'Certifi-Gate'.

The Check Point mobile threat research team disclosed its findings at a briefing session at Black Hat USA 2015 in Las Vegas, and describe it as 'a previously unknown vulnerability in the architecture of popular mobile Remote Support Tools (RSTs) used by virtually every Android device manufacturer and network service provider.' Full story...

Related posts:
  1. Chinese hackers seized 'gold mine' of information about US spies and army...
  2. Hackers build a new Tor client - Astoria - designed to beat the NSA...
  3. The growing hacker epidemic...
  4. The data hackers: mining your information for Big Brother ...
  5. Why your smartphone records everything you say to it...
  6. Romanian man kills himself and four-year-old son because of malware on computer...

No comments:

Post a Comment