Advertisement


Advertisement

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Breaking News : 500 Million Android Devices Affected by 'Accessibility Clickjacking' Malware: Report
#1
Advertisement
Mobile security firm Skycure has claimed that a new Android malware can allow malicious apps to access all text-based data on a device without requiring permission from the user.
The research firm has further claimed that the latest Android malware family dubbed "Accessibility Clickjacking" impacts almost all Android versions except the last two versions - Android 5.0 Lollipop and Android 6.0 Marshmallow. It adds that Accessibility Clickjacking affects almost 65 percent of all Android devices "at this point" which turns out to be over 500 million Android devices. The research firm says that the malware family affects Android devices running Gingerbread, Ice Cream Sandwich, Jelly Bean, and KitKat OS versions.
Skycure's Yair Amit explains in a blog that the malware can access personal information including emails without the consent of the user. He adds, "Clickjacking is a term for a malicious UI redressing technique that tricks a victim into clicking on an element that is different than the one the victim believes to be clicking on. This technique, which relied on the ability of malicious websites to load a seemingly benign webpage with an invisible overlay from another service (attacked service), used to be a major concern in the Web-application security world and yielded a variety of attacks against important services or frameworks, such as Facebook, Twitter and Flash."
The security firm pointed out that the Accessibility Clickjacking malware is not just a theoretical threat, and that last month a ransomware named Android.Lockdroid.E that was found by Symantec used the malware to gain admin rights. Amit suggests that once accessibility has been enabled on the targeted device, the attacker can even change admin permissions.
Skycure has also demonstrated the malware workflow by using a rat-hitting game. While the user gets an impression that they are playing the game, the malware in the background gets the accessibility via user's consent.
"What actually happens in the background might come as a surprise to the victim - his/her clicks are actually propagated to an underlying and invisible layer of the operating system - the Accessibility approval dialog. Completing the game means that the victim unknowingly approved Accessibility permissions for the "benign game," adds Amit. The mobile security firm, apart from recommending users install the Skycure App , tells users to get onto the latest version of Android; not to click on dialogue boxes; not to use third-party app stores, and verify app permissions.

http://m.gadgets.ndtv.com/mobiles/news/5...ort-810701
Reply
Thanks given by:
Advertisement
Advertisement




Possibly Related Threads...
Thread Author Replies Views Last Post
  General News: LG Q Stylus+ with 6.2-inch display and Android 8.1 Oreo launched India nairrk 0 199 09-04-2018, 02:07 PM
Last Post: nairrk
  General News: LG Q8 (2018) launched with 6.2-inch full HD+ FullVision display and Android 8.1 Oreo nairrk 0 218 08-06-2018, 12:10 PM
Last Post: nairrk
  General News: Xiaomi Qin 4G feature phones announced with AI features, Android OS nairrk 0 205 08-04-2018, 07:09 AM
Last Post: nairrk
  General News: Asus rolls out the Android 8.1 Oreo to Zenfone 3 Max (ZC553KL) nairrk 0 221 07-30-2018, 07:43 PM
Last Post: nairrk
  General News: Lava Z61 Android Go smartphone with FullView display launched in India nairrk 0 213 07-23-2018, 03:02 PM
Last Post: nairrk
  General News: Reliance Jio is not trying to import its JioPhone devices from outside nairrk 0 161 07-16-2018, 12:11 PM
Last Post: nairrk
  General News: Moto E5 Play Android Go smartphone announced with 5.34-inch 18:9 display nairrk 0 237 07-16-2018, 11:39 AM
Last Post: nairrk
  General News: Asus Zenfone Live L1 Android Go smartphone with 18:9 display launched nairrk 0 206 07-14-2018, 06:51 PM
Last Post: nairrk
  General News: LG Stylo 4 with 6.2-inch full HD display, Android 8.1 Oreo launched nairrk 0 191 06-21-2018, 10:17 AM
Last Post: nairrk
  General News: LG X5 with MediaTek 6750, 4,500mAh battery and Android Oreo launched nairrk 0 191 06-18-2018, 06:43 PM
Last Post: nairrk

Forum Jump:


Users browsing this thread: 1 Guest(s)
Advertisement