Researchers discover major security flaw in android smartphones


By MYBRANDBOOK


Researchers discover major security flaw in android smartphones

Security researchers have warned about the development of malicious apps that can access entire Android operating systems as a result of a significant security leak.

 

According to Google’s Android security team, a number of Android OEMs, including Samsung, LG, and MediaTek had their app signing certificates leaked, making it simple for hackers to install malicious apps on devices.

 

App signing is a critical unit of Android smartphone security that ensures app updates originate from the original creator. Several of these certificates from LG, Samsung and MediaTek appear to have been compromised and, worse, were used to sign malicious software.

 

A hacker who has a private key can infect popular apps with malware, regardless of where the software came from. The app will get an update because the malicious version uses the same key that Android security trusts.

 

Android.uid.system is a highly privileged user ID that is used by applications signed with this certificate. The latter has access to user data as well as other system rights. With the same level of access to the Android operating system, any other app that is certified with the same certificate can announce that it wants to run with the same user ID.

 E-Magazine 
 VIDEOS  Placeholder image

Copyright www.mybrandbook.co.in @1999-2024 - All rights reserved.
Reproduction in whole or in part in any form or medium without express written permission of Kalinga Digital Media Pvt. Ltd. is prohibited.
Other Initiatives : www.varindia.com | www.spoindia.org